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theories. The model-theoretic characterization via Kripke models allows one to construct finite 
representations of the inherently infinite static expansions. 

Both characterizations can be used as the basis of algorithms for query answering under the 
static semantics. We describe a query-answering interpreter for super programs which we devel- 
oped based on the model-theoretic characterization and which is available on the web. 
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1. INTRODUCTION 

The relationship between logic programs and non-monotonic knowledge represen- 
tation formalisms can be briefly summarized as follows. Any non-monotonic for- 
malism for knowledge representation has to contain some form of default negation, 
whether it is defined as an explicit negation operator or is implicitly present in 
the form of beliefs, disbeliefs or defaults. Since the main difference between logic 
programs and classical (monotonic) logic is the presence of default negation, logic 
programs can be viewed, in this sense, as the simplest non-monotonic extension of 
classical monotonic logic. 

However, standard logic programs suffer from some important limitations. Most 
importantly, they are unable to handle disjunctive information^. Yet, in natural 
discourse as well as in various programming applications we often use disjunctive 
statements. One particular example of such a situation is reasoning by cases. Other 
obvious examples include: 

(1) Approximate information: for instance, an age "around 30" can be 28, 29, 30, 
31, or 32; 

(2) Legal rules: the judge always has some freedom for his decision, otherwise 
he/she would not be needed; so laws cannot have unique models; 

(3) Diagnosis: only at the end of a fault diagnosis we may know exactly which 
part of some machine was faulty but as long as we are searching, different 
possibilities exist; 

(4) Biological inheritance: if the parents have blood groups A and 0, the child 
must also have one of these two blood groups (example from | Lipski 1979| ] ) ; 



(5) Natural language understanding: here there are many possibilities for ambiguity 
and they are represented most naturally by multiple intended models; 

(6) Reasoning about concurrent processes: since we do not know the exact sequence 
in which certain operations are performed, again multiple models come into 
play; 

(7) Conflicts in multiple inheritance: if we want to keep as much information as 



possible, we should assume disjunction of the inherited values, see [Brass and 



Lipeck 1993 



Disjunctive logic programming was used e.g. in the following projects for real ap- 
plications: 



(1) In the DisLoP project [ Aravindan et al. 1997 ], a logical description of a system 



together with a particular observation is transformed into a disjunctive program 
so that an interpreter for disjunctive logic programs can compute the minimal 



diagnosis Baumgartncr ct al. 1997 1 



(2) The view update problem in deductive and relational databases can also be 
transformed into a problem of computing minimal models of disjunctive pro- 



grams [Aravindan and Baumgartner 1997] 



1 The stable model semantics permits multiple models, which is something similar. But it has 
to be used with caution, since it can easily become inconsistent. Depending on the application, 
disjunctions can often be more natural. 



Super Logic Programs 



3 



(3) Another important application of disjunctive techniques in the database area 
is to glue together different heterogeneous databases to provide a single unified 
view to the user. With the ever expanding world wide web technology, millions 
and millions of data in thousands of different formats are thrown at a user who 
clearly needs some tools to put together information of interest to him. In 
[ ^chafer and Neugebauer 1997 ; Thomas 1998 1 it is shown how disjunctive logic 
programs can be used as mediators and thus as an important tool to create a 
powerful query language for accessing the web. 



(4) In Stolzenburg and Thomas 1996; stolzenburg and Thomas 1998 disjunctive 
logic programming was used for analyzing rule sets for calculating banking fees. 
A credit institution sells stocks and shares to its customers and charges their 
accounts. The fee depends on the value of the transaction, the customer type 
and various other parameters. All this is formulated in a set of rules in natural 
language. The problem is to translate this rule set into a formal language and 
then to analyze its various properties. For example does the rule set allow us 
to calculate a fee for each business deal? Is that fee unique? A straightforward 
translation into propositional logic and then using a theorem prover did not 
work. Ho wever, it turned out that using disjunctive logic programs solv ed the 



problem | Stolzcnburg and Thomas 1996 ; Stolzcnburg and Thomas 1998 



Formalisms promoting disjunctive reasoning are more expressive and natural to 
use since they permit direct translation of disjunctive statements from natural lan- 
guage and from informal specifications. Consequently, considerable interest and re- 
search effort^ has been recently given to the problem of finding a suitable extension 
of the logic programming paradigm beyond the class of normal logic programs that 
would ensure a proper treatment of disjunctive information. However, the problem 
of finding a suitable semantics for disjunctive programs and deductive databases 
proved to be far more complex than it is in the case of normal, non-disjunctive 
programs^. 

We believe that in order to demonstrate that a class of programs can be justifiably 
called an extension of logic programs one should be able to argue that: 

(1) the proposed syntax of such programs resembles the syntax of logic programs 
but it applies to a significantly broader class of programs, which includes the 
class of disjunctive logic programs as well as the class of logic programs with 
strong (or "classical") negation [Gclfond and Lifschitz 1991; Alferes et al. 1998]; 

(2) the proposed semantics of such programs constitutes an intuitively natural 
extension of one (or more) well-established semantics of normal logic programs; 

(3) there exists a reasonably simple procedural mechanism allowing, at least in 
principle, to compute the semantics^ 



2 It suffices just to mention seve ral recent workshops on Extensions of Logic Programming specif- 
ically devoted to this subject ([ Dix et al. 1995| Dix et al. 1997 |Dyckhoff ct al. 1996 ; Dix et al. 



1998 ) 



d The book by Minker et. 
research effort in this area. 



al. [ |Lobo ct al. 19 92 
See also ]Dix 



1995t| ; |Minkcr 1996 . 
4 Observe that while such a mechanism cannot 



provides a detailed account of the extensive 



Minker 1993 



Przymusinski 1995a; Przymusinski 



even in principle - be efficient, due to the inherent 
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(4) the proposed class of programs and their semantics is a special case of a more 
general non-monotonic formalism which would clearly link it to other well- 
established non-monotonic formalisms. 

In this paper we propose a specific class of such extended logic programs which 
will be (immodestly) called super logic programs or just super-programs. We will 
argue that the class of super-programs satisfies all of the above conditions, and, in 
addition, is sufficiently flexible to allow various application-dependent extensions 
and modifications. It includes all (monotonic) propositional theories, all disjunctive 
logic programs and all extended logic programs with strong negation. We also pro- 
vide a description of an implementation of a query-answering interpreter for the 
class of super-programs which is available on the WWW0. 

The class of super logic programs is closely related to other non-monotonic for- 
malisms. In fact, super logic programs constitute a special case of a yet more 
expressive non-monotonic formalism called the Autoepistemic Logic of Knowledge 



and Beliefs, AELB, introduced earlier in [Przymusinski 1994; Przymusinski 199S 



The logic AELB isomorphically includes the well-known non-monotonic formalisms 
of Moore's Autoepistemic Logic and McCarthy's Circumscription. Through this em- 
bedding, the semantics of super programs is clearly linked to other well-established 
non-monotonic formalisms. 

At the same time, as we demonstrate in this paper, in spite of their increased 
expressiveness, super logic programs still admit natural and simple query answering 
mechanisms which can be easily implemented and tested. We discuss one such 
existing implementation in this paper. Needless to say, the problem of finding 
suitable inference mechanisms, capable to model human common-sense reasoning, 
is one of the major research and implementation problems in Artificial Intelligence. 

The paper is organized as follows. In Section || we recall the definition and basic 
properties of non-monotonic knowledge bases, and we introduce the class of super 
logic programs as a special subclass of them. We also establish basic properties of 
super programs. In the following Sections]^ and ^we describe two characterizations 
of the semantics of super-programs, one of which is syntactic and the other model- 
theoretic. Due to the restricted nature of super programs, these characterization are 
significantly simpler than those applicable to arbitrary non-monotonic knowledge 
bases. In Section^ we describe our implementation of a query- answering interpreter 
for super-programs which is based on the previously established model-theoretic 
characterization of their semantics. Section ^ mentions related work. We conclude 
with some final remarks in Section [?]. For the sake of clarity, most proofs are 
contained in the Appendix. 

Throughout the paper, we restrict our attention to propositional programs. Since 
we can always consider a propositional instantiation of the program, this does not 
limit the generality of the obtained results from a semantic standpoint. Of course, 
many practical applications need rules with variables. The current version of our 



NP-completeness of the problem of computing answers just to positive disjunctive programs, it 
can be efficient when restricted to specific subclasses of programs and queries and it can allow 
effici ent approximation methods for broader classes of programs. 

5 Scc htt p: //w«w. inf ormatik. uni-giessen. de/staf f /brass/sip/. If this URL should be unavail- 



able, try tittp: //www2 . sis .pitt . edu/~sbrass/slp/ 
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interpreter for super-logic programs is already supporting variables that satisfy the 
allowedness/range- restriction condition (at least one occurrence of each variable 
must be in a positive body literal). This is done via an intelligent grounding 
mechanism, see Section [|. 

2. SUPER LOGIC PROGRAMS 

We first define the notion of a non-monotonic knowledge base. Super logic programs 
are special knowledge bases. 

The language is based on the Autoepistemic Logic of Knowledge and Beliefs, 
AELB, introduced in [ Przymusinski 1994; Przymusinski 199c| . However, in this 



paper we use the default negation operator not instead of the belief operator B. 
Actually, not F can be seen as an abbreviation for S(-i-F), so this is only a slight 
syntactic variant^. Consequently, all of our results apply to the original AELB as 
well. First, let us briefly recall the basic definitions of AELB. 

2.1 Syntax 

Consider a fixed propositional language C with standard connectives (V, A, -i, — 
<— , «->) and the propositional letters true and false. We denote the set of its 
propositions by Ate- Extend the language £ to a propositional modal language 
£-not by augmenting it with a modal operator not , called the default negation 
operator. The formulae of the form not F , where F is an arbitrary formula of C no t, 
are called default negation atoms or just default atoms and are considered to be 
atomic formulae in the extended propositional modal language C no t ■ The formulae 
of the original language C are called objective, and the elements of Ate are called 
objective atoms. Any propositional theory in the modal language C no t will be called 
a non-monotonic knowledge base (or "knowledge base" for short): 

Definition 2.1 (Non-monotonic Knowledge Bases). 
By a non-monotonic knowledge base we mean an arbitrary (possibly infinite) theory 
in the propositional language £ no t ■ By using standard logical equivalences, the 
theory can be transformed into a set of clauses of the form: 

Bi A ... A B m A not d A ... A not Gk 



, noi vj\ A ... A noi Ufc 
Ax V ... V Ai V not F x V ... V not F n 



where m, n,k,l > 0, Ai 's and Bi 's are objective atoms and Fi 's and Gi 's are arbi- 
trary formulae of £ no t ■ 

By an affirmative knowledge base we mean any such theory all of whose clauses 
satisfy the condition that 1^0. 

By a rational knowledge base we mean any such theory all of whose clauses satisfy 
the condition that n = 0. 

In other words, affirmative knowledge bases are precisely those theories that 
satisfy the condition that all of their clauses contain at least one objective atom in 
their heads. On the other hand, rational knowledge bases are those theories that 



6 notF was introduced as an abbreviation for B(-iF), and not -^B(F), because otherwise super 
logic programs would not be rational knowledge bases (see below). Then important properties 
would not hold. 
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do not contain any default atoms not Fi in heads of their clauses. Observe that 
arbitrarily deep level of nested default negations is allowed in the language £ no t ■ 

Super logic programs (also briefly called "super programs") are a subclass of 
non-monotonic knowledge bases. There are three restrictions: 

(1) Only rational knowledge bases are allowed (i.e. no default negation in the head). 

(2) Nested default negation is excluded. 

(3) Default negation can only be applied to positive formulas, e.g. not (—<p) and 
not (p — y q) cannot be used in super logic programs. 

Definition 2.2 (Super Logic Programs). 
A Super Logic Program is a non-monotonic knowledge base consisting of (possibly 
infinitely many) super-clauses of the form: 

F <- G AnotH 

where F, G and H are arbitrary positive objective formulae ( i. e. formulae that can 
be represented as a disjunction of conjunctions of atoms). 

In Proposition |2.5| , it will be shown that simpler clauses can be equivalently used. 
However, one docs not need a rule/clause form, but any formula can be permitted 
that is equivalent to such clauses. Our current implementation accepts all formulae 
that satisfy the following two conditions: 

(1) inside not only V, A, and objective atoms are used, and 

(2) not does not appear in positive context: 

— An atom A (objective atom or default negation atom) appears in the prepo- 
sitional formula A in positive context. 

— If A appears in F in positive context, it also appears in F A G, G A F, FW G, 
G V F, F <— G, G — ► F, F <-> G, G <-> F in positive context (where G is any 
formula) . The same holds for "positive" replaced by "negative" . 

— If A appears in F in positive context, it appears in ->F, F — > G, G <— F, 
F <-* G, G <-> F in negative context (where G is any formula). The same 
holds with "positive" and "negative" exchanged. 

Clearly the class of super-programs contains all (monotonic) prepositional the- 
ories and is syntactically significantly broader than the class of normal logic pro- 
grams. In fact, it is somewhat broader than the class of programs usually referred 
to as disjunctive logic programs because: 

(1) It allows constraints, i.e., headless rules. In particular it allows the addition 
of strong negation to such programs, as shown in Section |2.6| , by assuming 
the strong negation axioms <— A A -A , which themselves are program rules 
(rather than meta- level constraints); 

(2) It allows premises of the form not G, where G is not just an atom but a con- 
junction of atoms. This proves useful when reasoning with default assumptions 
which themselves are rules, such as not (man A -human), which can be inter- 
preted as stating that we can assume by default that every man is a human 
(note that -human represents strong negation of human) . 
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2.2 Implication in the Modal Logic 

The semantics of super logic programs can be seen as an instance of the semantics of 
arbitrary nonmonotonic knowledge bases which we introduce now. AELB assumes 
the following two simple axiom schemata and one inference rule describing the 
arguably obvious properties of default atomsQ 

(CA) Consistency Axiom: 

not (false) and ->not (true) (1) 



(DA) Distributive Axiom: 

For any formulae F and G: 



not (F V G) ^ not F A not G (2) 

(IR) Invariance Inference Rule: 

For any formulae F and G: 

notF <-> notG w 

The consistency axiom (CA) states that false is assumed to be false by default 
but true is not. The second axiom (DA) states that default negation not is dis- 
tributive with respect to disjunctions. The invariance inference rule (IR) states 
that if two formulae are known to be equivalent then so are their default negations. 
In other words, the meaning of not F does not depend on the specific form of the 
formula F, e.g., the formula not (F A ->F) is equivalent to not (false) and thus is 
true by (CA). 

We do not assume the distributive axiom for conjunction: not (F A G) <-> not FV 
not G. This would conflict with the intended meaning of not (falsity in all minimal 



models), see Remark 2.15 



Of course, besides the above axioms and inference rule, also propositional conse- 
quences can be used. The simplest way to define this is via propositional models. 
A (propositional) interpretation of C no t is a mapping 

X: At c U {not (F) : F £ C not } -> {true, false}, 

i.e. we simply treat the formulas not (F) as new propositions. Therefore, the notion 
of a model carries over from propositional logic. A formula F G C no t is a proposi- 
tional consequence of T C C no t iff for every interpretation X: X \= T ==> X \= F . 
In the examples, we will represent models by sets of literals showing the truth values 
of only those objective and default atoms which are relevant to our considerations. 

Definition 2.3 (Derivable Formulae). 
For any knowledge base T we denote by Cn not (T) the smallest set of formulae of the 
language C not which contains T, all (substitution instances of) the axioms (CA) 
and (DA) and is closed under both propositional consequence and the invariance 
rule (IR). 



7 When replacing not (F) in these axioms by B(^F), one gets the axioms of AELB as stated 



in I Brass ct al . 1999 . That pape r also proves the equivalence to the original axioms of [ Przy 



musinski 1994; Przymusinski 1998 
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We say that a formula F is derivable from the knowledge base T if F belongs to 
Cn not {T). We denote this fact by T h„ ot F. A knowledge base T is consistent if 
Cn no t{T) is consistent, i.e., if Cn no t(T) \f no t false. 

The following technical lemma follows by transliteration from a lemma stated 
in |Brass ct al. 1999|| for AELB: 



Proposition 2.4. For any knowledge base T and any formula F of C no t'- 

(1) Th„ of {not F -> -nnot -.F) 

(2) IfTh not F thenThnot not^F. 

Since the operator not obeys the distributive law for disjunction (DA), the default 
atom not H in the super logic program rules can be replaced by the conjunction 
not C\ A . . . A not C n of default atoms not Cj, where each of the Ci's is a conjunction 
of objective atoms. Together with standard logical equivalences, this allows us to 
establish the following useful fact: 

Proposition 2.5. A super logic program P can be equivalently defined as a set 
of (possibly infinitely many) clauses of the form: 

A 1 V . . . V A k <- B 1 A . . . A B m A not C x A . . . A not C„, 

where Ai 's and Bi 's are objective atoms and d 's are conjunctions of objective 
atoms. If k ^ 0, for all clauses of P, then the program is called affirmative. 

2.3 Intended Meaning of Default Negation: Minimal Models 

As the name indicates, non-monotonic knowledge bases must be equipped with 
a non-monotonic semantics. Intuitively this means that we need to provide a 
meaning to the default negation atoms not F. We want the intended meaning of 
default atoms not F to be based on the principle of predicate minimization (see 
[ Minker 1982] ; pclfond ct al. 1989C and [ [McCarthy 198C| ]): 



not F holds if ->F is minimally entailed 
or, equivalently: 
not F holds if F is false in all minimal models. 

In order to make this intended meaning precise we first have to define what we 
mean by a minimal model of a knowledge base. 

Definition 2.6 (Minimal Models). 
A model M is smaller than a model N if it contains the same default atoms but 
has fewer objective atoms, i.e. 

{ P G At c : M\=p} c {peAtc : N\= p}, 
{F G Cnot : M \= not (F)} = {F G C no t ■ N \= not (F)}. 

By a minimal model of a knowledge base T we mean a model M of T with the 
property that there is no smaller model N of T. If a formula F is true in all 
minimal models of T then we write T t=min F an d sa V that F is minimally 
entailed by T . 

In other words, minimal models are obtained by first assigning arbitrary truth 



values to the default atoms and then minimizing the objective atoms (see also [Yon 
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and Yuan 1993]). For readers familiar with circumscription, this means that we 
are considering circumscription CIRC(T; Ate) of the knowledge base T in which 
objective atoms are minimized while the default atoms not F are fixed, i.e., T \= m in 
F = CIRC(T;At c ) h= F. 

Example 2.7. Consider the following simple knowledge base T: 

— > car. 
car A not broken — > runs. 

Let us prove that T minimally entails -^broken, i.e., T \= m in ->broken. Indeed, in 
order to find minimal models of T we need to assign an arbitrary truth value to the 
only default atom not broken, and then minimize the objective atoms broken, car 
and runs. We easily see that T has the following two minimal models (truth values 
of the remaining belief atoms are irrelevant and are therefore omitted): 

M\ = {not broken, car, Runs, ->broken}; 
Mi = {->not broken, car, ->runs, ->broken}. 

Since in both of them car is true, and broken is false, we deduce that T (= m , n car 
and T \= m i n -^broken. □ 



2.4 Static Expansions 

The semantics of arbitrary knowledge bases is defined by means of static expansions. 
The characterizations given in Sections || and [| show that for the subclass of super 
logic programs, simpler definitions are possible. However, in order to prove the 
equivalence (and to appreciate the simplication), we first need to repeat the original 
definition (adepted to use not instead of B). 

As in Moore's Autoepistemic Logic, the intended meaning of default negation 
atoms in non-monotonic knowledge bases is enforced by defining suitable expansions 
of such databases. 

Definition 2.8 (Static Expansions of Knowledge Bases). 
A knowledge base T° is called a static expansion of a knowledge base T if it satisfies 
the following fixed-point equation: 

T° = Cn not (T U {notF : T° |= min ^F}), 

where F ranges over all formulae of C no t ■ 

A static expansion T° of T must therefore coincide with the database obtained 
by: (i) adding to T the default negation not F of every formula F that is false 
in all minimal models of T°, and, (ii) closing the resulting database under the 
consequence operator Cn no t ■ 

As the following proposition shows, the definition of static expansions enforces the 
intended meaning of default atoms. The implication is a direct consequence of 
the definition, the direction holds for ration al knowledge basesp and thus super 



logic programs. The proposition is proven in Przymusinski 1994; Przymusinski 



1998] 



8 In non-rational knowledge bases, the user can explicitly assert default negation atoms not F, 
even when F is not minimally entailed. 



10 • S. Brass and J. Dix and T. C. Przymusinski 



Proposition 2.9 (Semantics of Default Negation). 
Let T° be a static expansion of a rational knowledge base T . For any formula F of 
C no t we have: 

T° h not F iff T° hmin ~>F. 

It turns out that every knowledge base T has the least (in the sense of set- 
theoretic inclusion) static expansion T which has an iterative definition as the least 
fixed point of the monotonicf] default closure operator: 

*r(S) = Cn not (T U {not F : S |= min -iF}) , 

where S is an arbitrary knowledge base and the F's range over all formulae of 



C no t ■ The following proposition is a transliteration of a theorem from | Przymusinski 



1994; Przymusinski 1998; Przymusinski 1995b |. In Section H we will show that it 



is sufficient to consider only formulas F of a special from in ^t{S) when we use it 
for super logic programs. 

Proposition 2.10 (Least Static Expansion). 
Every knowledge base T has the least static expansion, namely, the least fixed point 
T of the monotonic default closure operator ■ 

More precisely, the least static expansion T of T can be constructed as follows. 
Let T° = T and suppose that T a has already been defined for any ordinal number 
a < (3. If (3— a + 1 is a successor ordinal then define: 

T tt+1 = * T (T«) = de/ Cn not (TU{notF:T a \= mia -<F} ), 

where F ranges over all formulae in C no t ■ Else, if (3 is a limit ordinal then define 
T 13 — [J a< fjT a . The sequence {T a } is monotonically increasing and has a limit 

T = T x = ^t(T x ), for some ordinal A. 



We were able to show in [Brass et al. 1999 that for finite knowledge bases, the 



fixed point is in fact already reached after the first iteration of the default closure 
operator ^t- In other words, T = T . 

Observe that the least static expansion T of T contains those and only those 
formulae which are true in all static expansions of T . It constitutes the so called 
static completion of a knowledge base T. 

Definition 2.11 (Static Completion and Static Semantics). 
The least static expansion T of a knowledge database T is called the static comple- 
tion of T . It describes the static semantics of a knowledge base T. 

It is time now to discuss some examples. For simplicity, unless explicitly needed, 
when describing static expansions we ignore nested defaults and list only those 
elements of the expansion that are "relevant" to our discussion, thus, for example, 
skipping such members of the expansion as not (F A ~iF), not -inot (F A ~*F), etc. 



9 Strictly speaking the operator is only monotone [ Przymusinski 199^ ; Przymusinski 1998 on the 
lattice of al l theories of the form Cn no t(T U N), where N is a set of default atoms. See also 
Lemma 



C.l 
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Example 2.12. Consider the database discussed already in Example 2.7 



car. 

car A not broken — > runs. 



We already established that T minimally entails ^broken. As a result, the static 
completion T of T contains not broken. Consequently, as expected, the static com- 
pletion T of T derives not broken and runs and thus coincides with the perfect 



model semantics [Przymusinski 1995a of this stratified program [Apt et al. 198S 



□ 



Example 2.13. Consider a slightly more complex knowledge base T: 

not broken — > runs, 
not fixed — > broken. 

In order to iteratively compute its static completion T we let T° — T . One easily 
checks that T° \= m in ~< fixed. Since 

T 1 = * T (T°) = Cn not (T U {notF : T° hmin -F}), 

it follows that not fixed G T 1 and therefore broken G T . Since, 

T 2 = ^(T 1 ) = Cn„ ot (T U {notF : T 1 hmin 



it follows that not ^broken G T . Proposition 2.4 implies ^not broken G T and 



thus T 2 |= m i n -iruns. Accordingly, since: 

T 3 = ^ T (T 2 ) = Cn not (T U {nofF : T 2 hmin --F}), 

we infer that not runs G T 3 . As expected, the static completion T of T, which 
contains T 3 , asserts that the car is considered not to be fixed and therefore broken 
and thus is not in a running condition. Again, the resulting semantics coincides 
with the perfect model semantics of this stratified program. □ 

Example 2.14. Consider a simple super-program P: 

visit-europe V visit _australia «— . 

happy <— visit_europe V visit _australia. 

bankrupt «— visit_europe A visit -australia. 

prudent <— not {visit -europe f\ visit _australia). 

disappointed <— not (visit -europeM visit -australia). 

Obviously, the answer to the query visit_europe V visit -australia must be positive, 
while the answer to the query visit-europe A visit -australia should be negative. 
As a result, we expect a positive answer to the queries happy and prudent and a 
negative answer to the queries bankrupt and disappointed . This means that default 
negation interprets disjunctions in an exclusive way, as usual in disjunctive logic 
programming approaches based on minimal models. 

Observe that the query not (visit-europe A visit -australia) intuitively means "can 
it be assumed by default that we don't visit both Europe and Australia?" and thus 
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it is different from the query not visit _europe A not visit -australia which says "can it 
be assumed by default that we don't visit Europe and that we don't visit Australia?" . 

It turns out that the static semantics produces precisely the intended meaning 
discussed above. Indeed, clearly happy must belong to the static completion of P. 
It is easy to check that ->visit-europe V -ivisit-australia, i.e. 

— '{visit _europe A visit _australia) 

holds in all minimal models of the program P and therefore 

not {visit-europe A visit Australia) 

must be true in the completion. This proves that prudent must hold in the com- 
pletion. Moreover, since bankrupt is false in all minimal models not bankrupt must 
also belong to the completion. Finally, since visit-europe V visit Australia is true, we 



infer from Proposition 2.4 that not— '{visit -europeV visit _australia) and thus also 
->not {visit _europe V visit _australia) holds. But then -^disappointed is minimally 
entailed, thus not disappointed belongs to the completion. □ 



Remark 2.15. In general, we do not assume the distributive axiom for conjunc- 
tion: 

not {F AG) ^ not F V not G. 

It is not difficult to prove that for a rational database T and for any two formulae 
F and G: 

T° |= [not F V not G) iff (T° |= not F or T° \= not G). 

But together with the axiom in question this would mean 

T° |= not {F A G) iff [T> \= not F or T° \= not G). 

This is too restrictive. For example, given the fact that we can assume by default 
that we do not drink and drive (i.e., T° \= not {drink A drive)) at the same time, 
we do not necessarily want to conclude that we can either assume by default that 
we don't drink (i.e., T° \= not {drink)) or assume by default that we don't drive 
(i.e., T° |= not {drive)). 

In rational knowledge bases, we only assume not {F) if F is false in all minimal 
models. But it might well be that F is true in some, and G is true in some, but 
they are never true together. So the axiom in question conflicts with the intended 
meaning of default negation. On some evenings we drink, on some we drive, but 
we never do both. If this is all the information we have, not {drink A drive) should 
be implied, but neither not {drink) nor not {drive) should follow. 

Note, however, that the implication in one direction, namely not {FAG) «— 
not F V not G, easily follows from our axioms. In some specific applications, the 
inclusion of the distributive axiom for conjunction may be justified; in such cases 
it may simply be added to the above listed axioms. □ 
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2.5 Basic Properties of Super Logic Programs 

The next theorem summarizes properties of super programs. It is an immediate 



consequence of results established in [ Przymusinski 1994; Przymusinski 1998 1: 
Theorem 2.16 (Basic Properties of Super Programs). 

(1) Let P be any super logic ■program and let P be its static completion. For any 
formula F , P \= not F = P \= m in "'F. 

(2) Let P be any super logic program and let P be its static completion. For any 
two formulae F and G holds: 



P \= {not F V not G) iff {P |= not F 



P h notG). 



(3) Every affirmative super program has a consistent static completion. Ln par- 
ticular, this applies to all disjunctive logic programs. 

(4) For normal logic programs, static semantics coincides with the well-founded 
semantics [Van Gelder et al. 1991]. More precisely, there is a one-to-one cor- 
respondence between consistent static expansions of a normal program and its 
partial stable models [Przymusinski 199C]. Under this correspondence, (total) 
stable models [Gelfond and Lifschitz 1981} (also called answer sets) correspond 
to those consistent static expansions which satisfy the axiom not A V not ->A, 
for every objective atom A. 

(5) For positive disjunctive logic programs, static semantics coincides with the 
minimal model semantics. 

2.6 Adding Strong Negation to Knowledge Bases 

As pointed out in | Gclfond and Lifschitz 1991 ; Alferes et al. 1998| in addition to 
default negation, not F, non-monotonic reasoning requires another type of negation 
-F which is similar t o classical negation -^F but does not satisfy the law of the 
excluded middle (see [ Alferes et al. 1998 for more information). 

Strong negation —F can be easily added to super logic programs by: (1) Extend- 
ing the original objective language C by adding to it new objective propositional 
symbols -A, called strong negation atoms, for all A G Ate. (2) Adding to the super 
logic program the following strong negation clause, for any strong negation atom 
-A that appears in it: A A -A — * false, which says that A and -A cannot be both 
true. Since the addition of strong negation clauses simply results in a new super 
logic program, our the results apply as well to programs with strong negation. 

3. FIXED POINT CHARACTERIZATION OF STATIC COMPLETIONS 



Due to Proposition 2.5, we can consider the language of super logic programs to 



be restricted to the subset C* not C C no t , which is the propositional logic over the 
following set of atoms: 

Ate U {not E : E is a conjunction of objective atoms from Ate}- 

In particular, the language C* not does not allow any nesting of default negations. In 
fact, default negation can be only applied to conjunctions of objective atoms. Note, 
however, that we allow also the "empty conjunction", so not [true) is contained 
in C* not . Note also that we can treat E essentially as a set — because of the 



14 • S. Brass and J. Dix and T. C. Przymusinski 



invariance inference rule not E\ and not Ei must have the same truth value if E\ 
and E2 differ only in the sequence or multiplicity of the atoms in the conjunction. 
In this way, if Ate is finite, only a finite number of default negation atoms must be 
considered. 

Clearly, in order to answer queries about a super program P we only need to 
know which formulae of the restricted language C* not belong to the static com- 
pletion of P. In other words, we only need to compute the restriction P\C* not of 
the static completion P to the language C* not . It would be nice and computation- 
ally a lot more feasible to be able to compute this restriction without having to 
first compute the full completion, which involves arbitrarily deeply nested default 
negations and thus is inherently infinite even for finite programs. The following 
result provides a positive solution to this problem in the form of a much simplified 
syntactic fixed point characterization of static completions. In the next section we 
provide yet another solution in the form of a model-theoretic characterization of 
static completions. 

Theorem 3.1 (Fixed-Point Characterization). 
The restriction of the static completion P of a finite super program P to the language 
C* not can be constructed as follows. Let P° = P and suppose that P n has already 
been defined for some natural number n. Define P n+1 as follows: 

Cn( P U {not Ei A ... A not E m — > not E : 

P n hmi„ ~>Ei A ... A ^E m -> -^Eo} ) , 

where Ei 's range over all conjunctions of objective atoms and Cn denotes the stan- 
dard propositional consequence operator. We allow the special case that E is the 
empty conjunction (i.e., true) and identify nottrue with false. 

The sequence {P n } is monotonically increasing and has a limit P n ° = p n °+ 1 ) 
for some natural number tiq. Moreover, P"° = P\C* not , i.e., P n ° is the restriction 
of the static completion of P to the language C* not . 

Proof. Contained in the Appendix ^|. □ 

The above theorem represents a considerable simplification over the original char- 



acterization of static completions given in Proposition |2.10| . First of all, instead 
of using the modal consequence operator Cn not the definition uses the standard 
propositional consequence operator Cn. Moreover, instead of ranging over the set 
of all (arbitrarily deeply nested) formulae of the language C no t it involves only 
conjunctions of objective atoms. These two simplifications greatly enhance the im- 
plementability of static semantics of finite programs. On the other hand, due to the 
restriction to the language C* not , we cannot expect the fixed point to be reached in 



just one step, as would be the case with the more powerful operator ^t{S) [Brass 



ct aL 1999| 



4. MODEL-THEORETIC CHARACTERIZATION OF STATIC COMPLETIONS 



In this section, we complement Theorem 3.1 by providing a model-theoretic char 



acterization of static completions of finite super programs. More precisely, we 
characterize models of static completions restricted to the narrower language C* not . 
The resulting characterization was directly used in a prototype implementation of 
a query answering interpreter for static semantics described in the next section. 
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Definition 4.1 (Reduced Interpretations). 

(1) Let OBJ be the set of all propositional valuations of the objective atoms 
At c - 

(2) Let MOT be the set of all propositional valuations of the default atoms 
{not (pi A ••• A p n ) : Pi G Atc}, which interpret not (true) (in case n = 0) 
asfalsfy. 

(3) We call an interpretation L of the language C* not , i.e., a valuation of Atc U 
{not A ■■■ A p n ) : pi G Atc}, a reduced interpretation and write it as 
as I — J bj U J no t with I bj G OBJ and I not G NOT . 

(4) Ln order to emphasize the difference, we sometimes call an interpretation X 
of the complete language C not , i.e., a valuation for Atc 1 *-) {not (F) : F G C not }, 
a full interpretation. 

(5) Given a full interpretation T, we call its restriction I = L bj U L not to the 
language C* not the reduct of I. 

Since an interpretation / = I bj U I not assigns truth values to all atoms occurring 
in a super program, the "is model of" relation between such interpretations and 
super programs is well defined. We call I — L bj U I no t a minimal model of a super 
program P if there is no interpretation J bj G OBJ with 

{p G At c ■ I'obj Hp} C {p G At c ■ hbj h P} 

such that I' = I' ob j U I no t is also a model of P. This is completely compatible with 
the corresponding notion for full interpretations. 

Our goal in this section is to characterize the reducts of the full models of the 
static completion P of a finite super program P. In fact, once we have the possible 
interpretations of the default atoms, finding the objective parts of the reducts is 
easy. The idea how to compute such possible interpretations is closely related to 
Kripke structures (which is not surprising for a modal logic, for more details see Ap- 
pendix g). The worlds in such a Kripke structure are marked with interpretations 
of the objective atoms Atc, and the formula not (p± A ■ ■ ■ Ap n ) is true in a world w iff 
-■(pi A • • • Ap n ) is true in all worlds w' which can be "seen" from w. Due to the con- 
sistency axiom, every world w must see at least one world w' . The static semantics 
ensures that every world w sees only worlds marked with minimal models. So given 
a set O of (objective parts of) minimal models, an interpretation I not of the default 
atoms is possible iff there is some subset O' C O (namely the interpretations in 
the worlds w') such that I no t \= not (pi A • • • A p n ) iff I bj f= ~^{pi A ■ ■ ■ A p n ) for 
all I bj G O 1 . Conversely, O also depends on the possible interpretations of the de- 
fault atoms (since a minimal model contains an objective part and a default part). 
So when we restrict the possible interpretations for the default negation atoms, we 
also get less minimal models. This obviously results in a fixed-point computation, 
formalized by the following operators: 

Definition 4.2 (Possible Interpretation of Default Atoms). 
Let P be a super program. 



Throughout this section, whenever we mention a sequence pi, . . . ,p n , we allow n to be as well. 
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(1) The operator f2 P :2^ OT — > 2 OBJ yields objective parts of minimal models 
given possible interpretations of the default atoms. For every M C MOT , let 

ftp (AT) '■= {lobj G OBJ : there is I not S M such that 

I = lobj U Inot is minimal model of Pj. 

(2) Let O C OBJ and I not £ MOT. We call I not given by O iff for every 
Pi,... ,p n £ Ate: 

Inot \= not (pi A • • • Ap„) 

<=>■ /or every J o6j £ 0: J o6j |= -i(p x A • • ■ A p„). 

(^5J T/ie operator Hp: 2® BJ — > 2^ OT yields possible interpretations of the default 
atoms, given objective parts of minimal models. For every O C OBJ , let 

n P (C) := {j not e AAOT : i/iere is a non-empty O' C O 

smc/i ttat / not is given by O' 
and there is I bj such that 

I = lobj U is a model of P.}. 

(4) The operator 8 P : 2 A/ ' OT -> 2 jVOT is ifte composition 9 P := n P o 17 P o/0 P 
and II P . 

Note that the additional constraint in the definition of II P (that it must be 
possible to extend I no t to a model of P) is trivially satisfied for affirmative programs, 
i.e. programs having at least one head literal in every rule. 

Now we are ready to state the main result of this section. 

Theorem 4.3 (Model-Theoretic Characterization). 
Let P be a finite super program: 

(1) The operator P is monotone ( in the lattice of subsets of MOT with the 
order ~D) and thus its iteration beginning from the set MOT (all interpretations 
of the default atoms, the bottom element of this lattice ) has a fixed point M° . 

(2) M° consists exactly of all I no t G MOT that are default parts of a full model 
I of P. 

(3) A reduced interpretation I \>j U I no t is a reduct of a full model T of P iff 

Inot G M° and lobj U Inot h P- 

PROOF. Contained in the Appendix |b| □ 

Example 4.4. Let us consider the following logic program P: 

pV q <— not r. 
q <— not q. 
r <— q. 

Until the last step of the iteration, it suffices to consider only those default atoms 
which occur in P and thus have influence on the objective atoms. But for the sake of 
demonstration, we start with the set MOT containing all eight possible valuations 
of the three default atoms not p, not q, and not r (however, we do not consider 
conjunctive default atoms here). These default interpretations can be extended 
to the minimal reduced models listed in the following table. Note that models 
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numbered 6 to 10 are equal to models numbered 1 to 5, except that not p is true 
in them (this shows that not p is really superfluous at this stage) . 



No. 


not p 


not q 


not r 


P 


q 


r 


1. 


false 


false 


false 


false 


false 


false 


2. 


false 


false 


true 


true 


false 


false 


3. 


false 


false 


true 


false 


true 


true 


4. 


false 


true 


false 


false 


true 


true 


5. 


false 


true 


true 


false 


true 


true 


6. 


true 


false 


false 


false 


false 


false 


7. 


true 


false 


true 


true 


false 


false 


8. 


true 


false 


true 


false 


true 


true 


9. 


true 


true 


false 


false 


true 


true 


10. 


true 


true 


true 


false 


true 


true 



For instance, when not q and not r arc both interpreted as false, p, q and r are 
false in a minimal model. If not q is interpreted as true, q and r are true and p is 
false by minimality. If not q is false and not r is true, there are two possibilities for 
a minimal model: either p can be true, or q and r together. So there are only three 
possible valuations for the objective parts of minimal models, i.e. Vlp(MOT) is: 



p 


q 


r 


false 


false 


false 


true 


false 


false 


false 


true 


true 



Note that although there is a minimal model in which p, q, and r are all false, 
there can be other minimal models based on different interpretations of the default 
atoms. Now the above three interpretations are the input for the next application 
of lip. Of course, from every minimal objective interpretation we immediately get 
a possible default interpretation if we translate the truth of p to the falsity of not p 
and so on. But we can also combine minimal objective parts conjunctively and let 
not p be true only if -*p is true in all elements of some set of minimal models. Thus, 
H P (n P (AfOT)) is: 



not p 


not q 


not r 


true 


true 


true 


false 


true 


true 


true 


false 


false 


false 


false 


false 



This means that only the models numbered 1,5,6,10 remain possible given the 
current knowledge about the defaults. Their objective parts are: 



p 


q 


r 


false 
false 


false 
true 


false 
true 



Finally, p is false in all of these models, so not p must be assumed, and only the 
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following two valuations of the default atoms are possible in the fixed point Af°: 



not p 


not q 


not r 


true 
true 


true 
false 


true 
false 



The reduced models of the least static expansion P consist therefore of all reduced 
interpretations that include one of these two default parts and are models of P 
itself. □ 



Obviously, computing the reduct of a full interpretation is easy. Conversely, 
in the Appendix, Definition B.l, we define a Kripke structure which allows us to 



extend the reduced interpretations to full interpretations, which are models of the 
static completion. However, let us observe that not all full models of the least 
static expansion can be reconstructed in this way. Instead, we obtain only one 
representative from every equivalence class with the same reduct. For example, one 
can easily verify that the program P := {p <— notp] has infinitely many different 
full models (see Example A. 6 in the Appendix). 



5. IMPLEMENTATION OF THE MODEL-THEORETIC CHARACTERIZATION 

We implemented a query- answering interpreter for the static semantics in the class 
of super programs based on the above model-theoretic characterization^. The 
interpreter has a web interface, so it is not necessary to install it locally in order to 
try it. 

5.1 Parsing and Clause Transformation 

As mentioned before, the interpreter does not require clause form. One can use the 
following logical operators: 



Name 


Notation 


Alt. 


Priority 


Associativity 


Classical Negation (-i) 






1 


right assiciative 


Default Negation (not ) 


not 




1 


cannot be nested 


Conjunction (and, A) 


& 




2 


right associative 


Disjunction (or, V) 


1 


; v 


3 


right associative 


Implication (then, — >) 


-> 




4 


not associative 


Implication (if, <— ) 


<- 




4 


not associative 


Equivalence (if and only if, <->■) 


<-> 




4 


not associative 



Default negation can only be used in negative context, and inside default negation, 
only disjunction and conjunction are permitted. As in Prolog, atoms are sequences 
of letters, digits, and underscores that start with a lowercase letter. Alternatively, 
one can use any sequence of characters enclosed in single quotes. Ever y formula 
must end in a full stop " . " . For instance, the last line of Example 2.14 would be 
entered as: 



Sec ittp: //www. inf ormatik. uni-giessen. de/staff /brass/sip/. Actually, there are two im 



plementations: A prototype written in Prolog (1325 lines, 608 lines of code), and a version with 
web user interface and better performance written in CH — h (21809 lines, 10201 lines of code). The 
source code of both versions is freely available. The CH — h version is still being further developed. 
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disappointed <- not (visit_europe I visit_australia) . 

The first task of the program is to read the input, check it for syntactical correctness, 
and translate it into clauses as shown in Proposition |2.5| . This is done with standard 
techniques. For instance, the above input formula is internally represented as 

disappointed <- not (visit_europe) , not (visit_australia) . 
5.2 Intelligent Grounding 

As mentioned above, the current implementation permits rules with variables, 
but every variable must appear in a positive body literal ( "allowedness" , "range- 
restriction"). For instance, the rule 

p(X,a) I p(X,b) :- q(l,X), not r(X) . 

is syntactically valid, since X appears in q(l ,X) . This check is done after the clause 
transformation, so "positive body literal" is not literally required in the input. As 
in Prolog, variables start with an uppercase letter, and the anonymous variable 
"_" is also understood. Predicate arguments can be atoms, integers, or variables. 
Function symbols (term/list constructors) are not permitted in order to ensure that 
the ground instantiation is finite. 

However, our implementation does not compute the complete ground instantia- 
tion of the input program, since this will often be prohibitively large. Instead, the 
set of derivable conditional facts is computed: 

Definition 5.1 (Conditional Fact). 
Conditional facts are formulae of the form 

Ax V . . . V A k <- not Ci A . . . A not C n , 

where the Ai are objective atoms (positive ground literals) the Ci are conjunctions 
of objective atoms (positive ground literals), k > 0, and n > 0. In the following, we 
treat head and body of conditional facts as sets of literals, and write them as A <— C 
with A = {Ai, . . . , Ak} and C = {not Ci, . . . , not C n }- 

So conditional facts are rules without positive body literals, and because of the 
allowedness condition, they also cannot contain variables. Conditional facts were 



introduced in jBry 1989| ; [Bry 1990| [Dung and Kanchanasut 1989 ] 



The derivation is done with the hyperresolution operator, which is a general- 
ization of the standard Tp-operator. In the non-disjunctive case, the Tp-operator 
applies a rule A <— B\ A . . . A B m by finding facts B[ , . . . , B' m that match the body 
literals, i.e. Bio — B[ for a ground substitution a, and then deriving the corre- 
sponding instance Aa of the head literal. This is applied e.g. for the bottom-up 
evaluation in deductive databases. The generalization for conditional facts is as 
follows: 

Definition 5.2 (Hyperresolution Operator). 



Let P be a set of super logic program rules as in Proposition 2. 1 and J- be a set of 
conditional facts. Then Hp(T) is the set of conditional facts 

{A l0 -, . . . , A k a} U [A x \ {Bxo-}) U . . . U (A m \ {B m a}) «- 

{not Ci<t, . . . , not C n a} U C\ U . . . U C m 
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such that there is a rule 

Ai V . . . V A k <- -Bi A . . . A B m A not C x A . . . A not C„. 

in P, conditional facts At <— Ci, i = l,...,m in J-, and a subsitution a with 
Bier € Ai. 

In other words, the positive body literals are matched with any literal in the 
headQ of a conditional fact, and then the remaining head literals are added to 
the corresponding instance of the rule head, as the conditions are added to the 
corresponding instance of the negative body literals. For example, if the rule 

Pl (X) Vp 2 (y) «-«i(a,X) Aq 2 (X,Y) A not r(Y) 

is matched with q\ (a, a) Vs(6) and t(a) Vq2(a, b) not u(c), the derived conditional 
fact is 

pi(a) Vp 2 (b) V s(b) V t(a) <- not r(b) A not u{c). 

Again, head and body of conditional facts are treated as sets of literals, so du- 
plicate literals are removed. Also for the hyperresolution step itself, the rule is 
instantiated only as far as there are matching conditional facts. 

The hyperresolution operator is applied iteratively until no new conditional facts 
can be derived. Since there are only finately many possible ground literals^] and 
no duplicates are permitted in head or body, the process is guranteed to terminate. 
The importance of the hyperresolution fixpoint is that it has the same minimal 
models as the original program: 

Theorem 5.3. 

Let P be a super logic program, Tq :— 0, and Ti+\ := Hp{Ti), and n be a natural 
number such that T n+ i = T n . Then the following holds for all Herbrand interpre- 
tations I: I is a minimal model of the ground instantiation P* of P if and only if 
I is a minimal model of T n . 

Proof. See Appendix ^. □ 

Of course, for the termination it is important that the implementation discovers if 
the same conditional fact was derived again. However, also non-minimal conditional 
facts can be eliminated: A conditional fact ^4 < — C is non-minimal if there is another 
conditional fact A 1 *— C with A 1 C A and C C C, where at least one inclusion 
is proper. Since in this case the non-minimal conditional fact A <— C is logically 
implied by the stronger conditional fact A' <— C, the set of models is not changed 
if ^4 < C is deleted. 

5.3 Algorithm for Detection for Duplicate and Non-Minimal Conditional Facts 

Since this redundancy test is needed often, it is essential that it is implemented 



efficiently. E.g. [3eipel 1994 1 noted that the elimination of duplicate and subsumed 



conditional facts took more than half of the total running time of query evaluation. 



12 Actually, one can make the resolvable literal unique, see [Brass 1996 . However, this is not yet 
done in the current implementation. 

13 As mentioned before, no function symbols are permitted. Also, the conjunctions inside default 
negation are treated as sets of objective atoms: The implementation discovers e.g. that not (p/\q) 
and not (q A p A q) are really the same. 
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testno := 0; 

T := 0; 

procedure insert(.A^C) 
begin 

if A = and C = then 

report inconsistency and exit; 
testno = testno + 1; 
for each A G A do 

for each A' <- C G J 7 with ie/ do 

if inc_overlap(.A' <-C, + |C|) then 
return; /* A <— C is non-minimal */ 
for each C6C do 

for each .4' <- C £ J 7 with C G C do 

if inc_overlap(A' *-C, A| + |C|) then 
return; /* .A <— C is non-minimal */ 
/* A < — C is minimal, insert it: */ 
T := T\J{A^C); 
length LA <-C] := |«4.| + |C|; 
lastset [A <— C] := 0; 
end; 

function inc_overlap(y4' <— C, 0: bool 
begin 

/* Increment or initialize the overlap counter: */ 
if lastset LA' <— C] = testno then 

overlap L4' •<— C] := overlap LA' *- C] + 1; 

else 

overlap L4' <- C] := 1; 
lastset LA' <— C'] := testno; 
/* Check for subsumption: */ 
if overlap[A' «- C] = length[A' <- C] then 

return true; /* A <— C is non-minimal */ 
if overlap [A' <— C] = Z then 

.= ^\{^' ^C'}; /* A' <-C is non-minimal */ 
return false; 
end; 

Fig. 1. Algorithm for Detecting Duplicate and Non-Minimal Conditional Facts 



The subsumption check used in our implementation when a newly derived con- 
ditional fact A <— C is inserted into the set T runs in the time 

O (number of occurrences of literals from A <— C in J 7 ). 



We use the algorithm from Brass and Dix 1995 1 that is shown in Figure [l| 



The basic idea is as follows: We store for each existing conditional fact an overlap 
counter. When a new conditional fact A <— C is produced, we access for each literal 
in A and C all conditional facts A' <— C that contain the same literal and increment 
the overlap counter of these conditional facts. If the overlap counter (i.e. the number 
of common literals) reaches the length (number of literals) of A' <— C, then A <— C 
is redundant. Otherwise, if it is equal to the length of A <— C, then A' <— C is 
redundant. 

It would be inefficient if we had to set the overlap counters of all existing con- 
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ditional facts back to before each redundancy test. Therefore, we do a "lazy 
initialization" : Each test is assigned a unique number, and we store for each con- 
ditional fact the value of the counter at the last time the conditional fact was 
accessed. 

Our implementation also does a seminaive evaluation by requiring that at least 
one body literal is matched with a conditional fact that was newly derived in the 
last hyperresolution round. Although it is still possible that the same conditional 
fact is derived more than once, it is at least never produced twice in the same way. 

5.4 Residual Program 

In the end, when we apply the model-theoretic characterization for a program 
that contains n different default negation literals, we need to consider 2™ possible 
interpretations of these literals and compute minimal models for them. That is 
obviously very expensive and is only possible for relatively small n. 

Therefore, our implementation evaluates the simple cases directly before it starts 
the expensive algorithm on the remaining difficult cases. This is done by means 



of reduction operators defined and analyzed in | Brass and Dix 1999 ]). Positive 
reduction means that not p can be evaluated to true if p does not occur in any head 
of a conditional fact: 

Definition 5.4 (Positive Reduction). 
A set T\ of conditional facts is transformed by positive reduction into a set Ti of 
conditional facts if there is an atom p and a conditional fact A <— C G T such 
that p does not occur in any head in T and 

T 2 = {Fi \ {A <- C}) U{A^- C'}, 

where C = C\ {not p}. 

Negative reduction means that not pi A . . . A not pk can be evaluated to false if 
there is an unconditional fact p\ V . . . \l pu true: 

Definition 5.5 (Negative Reduction). 
A set T\ of conditional facts is transformed by negative reduction into a set T% of 
conditional facts if there is p\ V . . . V pk <— true in T\ and Ti = T\ \ {A <— C} 
where {not p\, . . . , not pk} Q C. 



For instance, in Example 2.14 there is an unconditional fact 

visit_europe V visit _australia. 

As mentioned above, the last rule in that example is internally represented as 

disappointed <— not (visit _europe) A not (visit _australia) . 

It can be deleted, because its condition can never be true. In the example, this 
also eliminates two default negation atoms, which means that fewer interpretations 
must be considered in the next step of the algorithm. 

The current version of our implementation does not evaluate default negation 
literals that contain conjunctions of atoms. Since the reduction step is only an 
optimization, this is possible: negations of conjunctions remain for the general al- 
gorithm. But we of course aim at strengthening the optimizations in future versions. 
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Note that applying negative reduction can make positive reduction applicable, 
and vice versa. The two transformations are applied as long as possible, the result 
is called the residual program. It is uniquely determined, the exact sequence of 
applications of the two transformations is not important. The reduction in the size 
of the program and the number of distinct default negations can be quite significant. 
For instance, no default negations remain if the input program is stratified and non- 
disjunctive. 

Negative reduction can be implemented with a method that is very similar to the 
overlap counting shown above for the elimination of nonminimal clauses. Positive 
reduction is implemented by managing for each objective atom a counter for the 
number of occurrences in conditional fact heads, as well as a list of atoms for which 
this counter is 0. 

Note that positive and negative reduction do change the set of minimal models, 
since even if there is the fact p, the interpretation of not p in a minimal model is 
arbitrary. Only the static semantics ensures that notp is false in this case. The 
following simple cumulation theorem ensures that positive and negative reduction 
as well as other such optimizations do not change the static semantics: 

Theorem 5.6. (1) Let T be a knowledge base with T |= m ; n —>F. Then T and 
TU {not F} have the same static expansions. 

(2) Let T\ and T2 be knowledge bases with Cn not (Ti) = Gn not {T2). Then T\ 
and T2 have the same static expansions. 

For instance, consider the program {p *— notq}. Since q is false in all minimal 
models, we can add notq by (1) without changing the static semantics. Both 
formulas together are logically equivalent to {p, not q}. By (2), this does not change 
the static semantics. Finally, since also {p} alone implies minimally ->q, by (1) we 
get that {p} has the same static semantics as {p, not q}. This proves that the given 
program can indeed be reduced to {p} (an example of positive reduction) . 

For an example of negative reduction, consider the program T\ : 

pV q. 

s <— not p A not q A not r. 

Negative reduction transforms this program into T2 = {pVr/}. In order to show that 
this does not change the static semantics, we apply pa rt (2 ) of the theorem. We must 



show that T2 is CVi no t-equivalent to T\\ Proposition 2.4 tells us that not {~<{p V q)) 



is contained in Cn no t(T2), and then we also get that —<not (pVg) £ Cn no t(T2) (by 



Proposition 2.4, the invariance inference rule (IR) and propositional consequences). 
By applying the distributive axiom (DA) ->(notpA notq) follows. But now the 
rule s <— notp A not q A notr is a propositional consequence, and therefore also 
contained in Cn no t(T2). 

Corollary 5.7. Positive and negative reduction do not change the static se- 
mantics of a program. 

5.5 Application of the Model-Theoretic Characterization 

We apply the definition of the operators Sip and Lip from Section ^ quite literally. 
Of course, we use not the input program P, but the residual program T. 
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Let CritNeg be the set of all default negation atoms that appear in T; 

O := 0; /* Objective parts of minimal models, filled by procedure modgen */ 

function static (JF) : Set of static interpretations for CritNeg 
begin 

for each interpretation Inot of CritNeg do 
V := {A : A <- C 6 T, Inot \= C} ; 

modgen(X>); /* Inserts minimal models of T> into O */ 

Af := 0; 

for each interpretation I no t of CritNeg do 
if possible (.Inot , O) then 

if there is no false <— C £ T with I no t \= C then 

N -.= Afu{I no t}; 

Changed := true; 
while Changed do 

Changed := false; 

O := 0; 

for each I no t £ AT do 

V := {A : A^C e T, Inot NC); 
modgen (D) ; 
for each I no t £ AT do 

if not possible (.Inot , O) then 
Af := Af\{Inot}; 
Changed := true; 

return Af; 
end ; 

function possible (I n ot , O) : bool 
begin 

In := CritNeg; 
NotEmpty := false; 
for each 7 y g O do 

/* Interpretations are identified with the set of true default atoms 
l 'not ■= i not (pi A ... A p n ) e CritNeg : I obj \= -.(pi A ... A p n )} i 
if I not Q I' not then 
In ■= In (^ I' no t > 
NotEmpty := true; 
return I no t = In and NotEmpty; 
end; 

Fig. 2. Application of the Model-Theoretic Characterization 
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As mentioned before, it suffices to consider only those default negation atoms 
that occur explicitly in the residual program. We call these the "critical" default 
negation atoms. Other default atoms have no influence on the minimal models and 
we can always extend a valuation of the critical default atoms consistently to a 
valuation of all default atoms. The objective atoms that occur inside the default 
negations in the residual program are called the critical objective atoms. 

The algorithm shown in Figure [2] computes the static interpretations for the 
critical default negation atoms, i.e. the fixed point Af° of 9jf (reduced to critical 
default negation atoms). The fixpoint computation starts with the set of all possible 
interpretations for the crtical default negation atoms. This is the most expensive 
part of the algorithm, so real improvements must attack this problem. In order to 
keep at least the memory complexity in reasonable limits the set Af is materialized 
only after the first filtering step (appication of Ojf). Without this optimization, 
the first half of the procedure static (J 7 ) could simply be replaced by assigning Af 
all possible interpretations. 

Now the fixpoint computation starts (the while-loop in Figure ||) . In each step, 
first the set O = flf(Af) of minimal models, reduced to the objective atoms is 
computed. The default negation part of each such minimal model must be an 
element of Af. 

Our implementation computes O = fl^(Af) as follows: For each default nega- 
tion interpretation in Af, we evaluate the conditions of the conditional facts in the 
residual program and get a set T> of positive disjunctions. For this, any minimal 
model generator can be used. We use the algorithm explained in the next subsec- 
tion. A nice feature of it is that it computes not interpretations for all objective 
atoms, but only for the critical ones, i.e. those objective atoms that appear inside 
default negations in the residual program. Minimal model generators proposed in 



1996] 



the literature are, e.g., [Bry and Yahya 1996; Niemela and Simons 1996; Nicmcla 



Once we have computed O, interpretations are eliminated from Af that do not 
satisfy the condition of li^(0). However, it would be very inefficient to consider 



all subsets O' C O, as required in Definition 4.2. However, in order to check 
whether a given interpretation I not of the default atoms is selected by Op, only the 
maximal O' is of interest. It is the set of all I ob j € O that satisfy, for every default 
atom, the condition: 

if Inot h not (Pi A ' ' ■ A Pn). then I obj \= ^(pi A • • ■ A p n ). 

Obviously, the inclusion of other I ob j into O' would immediately destroy the re- 
quired property, namely that I no t is the "intersection" of all models in O': 

Inot |= not (pi A • • • Ap n ) for all I ob j 6 O: I obj |= -i(px A • • • Ap n ). 

Of course, it must also be tested that the set O' is non-empty. In the procedure 
possible shown in Figure |2|, the set O' is not explicitly constructed, but instead 
the interpretation I n is constructed as the intersection of all elements of O' . 

5.6 Computation of Minimal Models 

In order to compute Cly?(Af), we must compute the objective parts of minimal 
models, of which the default negation part is one of the interpretations in Af. As 
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procedure modgenCD) 
begin 

/ := 0; /* Completely undefined interpretation */ 
modgen.recCD, /) ; 
end; 

procedure modgen_rec (T> , I) 
begin 

if all critical objective atoms have a truth value in / then 
O := OU{I}; 

else 

select a critical objective atom p that is still undefined in /; 

eliminate non-minimal disjunctions from T>; 

if p does not appear in a disjunction in T> then 

/* p is surely false */ 

modgen_rec {T> , I U {^p}) ; 
else if p appears as a non-disjunctive fact in T> then 

/* p is surely true */ 

modgen_rec {T> , I U {p}) ; 

else 

/* p can be false or true */ 

V := {-4\{p} : A&T>}\ /* Remove p from all disjunctions */ 
modgen_rec CD' , /U{^p}); 

for each disjunction pi V ... V Pj— 1 V p V Pi+i V . . . V p n £ T> do 
I' := IU{p, -ipi,...,-ip i _i,-ip i+ i,...,-ip„}; 
V := {A\{pi,...,Pi-i,Pi + i,...,p n } ■ AeV} U {p}; 
modgen_rec CD' , 

end ; 

Fig. 3. Minimal Model Generator 

explained above, we do this by looping over the interpretations I not € A/", evaluating 
the conditions C of the formulas A <— C G T in I no t, and computing minimal 
models of the resulting positive disjunctions of objective atoms^. The algorithm 
that is used to compute minimal models of these disjunctions is shown in Figure ||. 
We only compute the truth values of critical objective atoms, i.e. objective atoms 
that appear inside default negations in J-f^ Of course, it is important that this 
partial interpretation can be extended to a total minimal model. 

So let p be a critical objective atom that is not yet assigned a truth value. The 
two simple cases are: (1) p does not appear in any disjunction in T>: Then p must 
be false in every minimal model. (2) p appears as a (non-disjunctive) fact in T>: 
Then p must be true in all minimal models. 

The difficult case is when p appears in one or more proper disjunctions. Then it 
can be true or false, and we backtrack over the different possibilities (the backtrack- 
ing is simulated with local variables and "call by value" parameters in Figure ^, 
in the actual implementation, several stacks are used). The model construction is 



14 One "last minute" idea was to compute directly minimal models of T, which could be done 
with an algorithm similar to the one shown in Figure ^. This might relieve us from the need to 
consider exponentially many interpretations, but depending on the given rules, it might backtrack 
over even more different cases. Improvements in this direction are subject of future research. 
15 In the last recursive call, /' can assign "false" to additional objective atoms, which is required 
as a reason for a critical atom being true. 



Super Logic Programs • 27 



based on the following theorem: 
Theorem 5.8. 

Let V be a set of disjunctions of objective atoms, which does not contain the empty 
disjunction false, and which does not contain two disjunctions A and A', such that 
A d A' (i.e. A' is non-minimal) . Let L be a partial interpretation such that atoms 
interpreted as false do not appear in V and atoms interpreted as true appear as 
facts in T>. Let p be an atom that appears in the proper disjunction 

Pl V • • • V Pi-! V p V p l+ i V • • • V p n 
(and possibly more such disjunctions). Then 

(1) There is a minimal model of T> that extends I and interprets p as false. 

(2) There is a minimal model of T> that extends I and interprets p as true and 
Pi,... ,p i -i 1 p l+ i, ...,p„ as false. 

Proof. See Appendix ||. □ 

First, p can be false. In order to ensure that the theorem is again applicable for 
the next atom, we eliminate p from all disjunctions in V (which also might eliminate 
further disjunctions that now become non-minimal). Alternatively, p can be true. 
However, p can only be true in a minimal model if for one of the disjunctions in 
which p appears, all the remaining atoms are false. This ensures that there is 
a reason why p must be true. Again, the assigned truth values are reflected by 
changing the set of disjunctions: p is added as a fact and pi, . ■ . ,Pi_i,Pi+i, . . . ,p n 
are removed from all disjunctions. This might make disjunctions in T> non-minimal, 
they are removed with the same overlap counting technique as shown in Figure [j]. 
In this way, assumed truth values are immediately propagated in the disjunctions, 
which often makes truth values of further critical atoms unique. 

The algorithm can also be understood as applying a generalization of Clark's 
completion to disjunctions: One treats the disjunction piV ■ ■ ■ V ' p n like the n rules 

Pi <— ->Pi A • • • A ^Pi-i A ^Pi+i A • • ■ A ^p n 

and then applies the standard completion (which basically translates <— to <-►). 
Whereas in general, Clark's completion does not correspond to minimal models, 



in this part icular case, the completion enforces exactly the minimal models [ Brass 



et al. 1999| . For instance, suppose that p appears in the disjunctions pVg and 
p V r V s. Then the completion contains the formula 

p <-> ->q V (-T A -is). 

The above model generation algorithm distinguishes now three cases: 

(1) p is false. Then it is removed from the disjunctions, so q and rVs are assumed. 

(2) p is true and q is false. 

(3) p is true and r and s are both false. 

In summary, nice features of the algorithm are: 

(1) It never runs into dead ends: All assumed truth values are indeed possible. 

(2) No additional minimality test for the generated models is needed. 
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(3) It can generate partial minimal models, i.e. truth value assignments for any 
subset of the atoms that can be extended to minimal models. 

(4) The space complexity is polynomial in the size of the input disjunctions. 
On the negative side, the algorithm may generate the same model several times. 
5.7 Query Evaluation 

The implementation can print the fixed point J\f° of Ojf, i.e. all static interpretations 
of the default negation literals. Normally, only the truth values of the critical 
negations are shown, but one can add further default negation literals if one wants 
to see their truth values. 

Queries are written in the form 

? pOO , q(X,b) , not r(X) . 

They are handled by adding a rule with a special predicate $answer in the head: 

$answer(X) <- p(X), q(X,b), not r(X) . 

Then the hyperresolution fixpoint is computed as usual. When positive reduction 
is applied, and when minimal models are generated, conditional facts that contain 
$answer in the head are ignored. Conditional facts in the residual program with 
only $answer in the head correspond to possible answers. Their conditions are 
evaluated in each of the models in 7V°. If the condition is true in all I no t £ Af°, the 
corresponding answer is printed. 

6. RELATED WORK 

6.1 Extended Logic Programs by Lloyd and Topor 

The first attempt to generalize the syntax of logic programs is due to Lloyd and 



Topor | Lloyd and Topor 1984; Lloyd and Topor 1985; Lloyd and Topor 1986 1. They 



allow arbitrary formulae in bodies of clauses, which is especially important in order 
to map database queries and view definitions into logic programming rules. How- 
ever, the head of a rule must still be a single atom. Furthermore, their semantics 
differentiates between an atom occurring in the head and its negation occurring in 
the body, whereas our semantics is invariant under logically equivalent transforma- 
tions. 

Lloyd and Topor use Clark's completion for defining the meaning of default nega- 
tion, whereas the static semantics extends the well-founded semantics. We have not 
yet treated quantifiers in the formulae of knowledge bases, but all other normal- 
ization transformations of Lloyd and Topor work as well for our semantics. This 
means that if Lloyd and Topor had used the WFS instead of Clark's completion, 
they could have come up with a special case of the static semantics (restricted to 
formulae of the form A <— W) . 

6.2 Disjunctive Stable Semantics 

The disjunctive stable semantics (answer sets) is the most popular semantics pro- 



posed earlier for disjunctive programs [Przymusinski 1990; Gelfond and Lifschitz 



1991]. Its main problem is that it is inconsistent for some very intuitive programs, 
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such as: 



work 
sleep 
tired 
angry 
paid 



not tired, 
not work, 
not sleep, 
not paid, work. 



Here we should at least be able to conclude paid and not angry, and the static 
semantics gives us just that. In general, the static semantics is always consistent 
for disjunctive logic programs. 

In addition to the fact that stable semantics is contradictory for some very simple 
and natural programs, it also suffers from a number of structural problems. In 
particular, the stable semantics is not relevant, i.e., answering a query does not 
depend only on the call graph below that query ([Brass and Dix 1997; Dix 1995a | ) , 
and it is not compositional (or modular), a highly desirable property for software 
engineering and KR ]Bry 1996| ; [Bugliesi ct al. 1994| ; [Tcusink and Etallc 1996| . The 
static semantics has both of these nice structural properties. Thus methods for 
query optimization based on the dependency graph can be applied and may reduce 
the overall computation. 

Needless to say, we do not claim that the static semantics should replace the 
disjunctive stable semantics. Like it is the case with normal logic programs, there 
are some application domains for which the disjunctive stable semantics seems to 



be better suited to represent their intended meaning Cholewiriski et al. 1995]. 
However, we do claim that the static semantics is a very natural and well-behaved 
extension of the well-founded semantics to disjunctive programs and beyond. Be- 
cause of the importance of the well-founded semantics for normal programs, it is of 
great importance to find the its proper extension(s) to more general theories. 

6.3 Weil-Founded Circumscriptive Semantics 

Our work is also related to the approach presented in [ You and Yuan 1993fl where 
the authors defined the well-founded circumscriptive semantics for disjunctive pro- 
grams. They introduced the concept of minimal model entailment with fixed in- 
terpretation of the default atoms and defined the semantics of T as the minimal 
models of T which satisfy the limit of the following sequence: W° = and 

W n+1 :=W n U {^notp : T U W n \=p}U{notp : T U W n hmin ~>p} 

(this is a translation in our own notation). In the definition of the static fixpoint 
operator (see Proposition 2.10 ), negations of default negations are not directly 
assumed. But in contrast to the well-founded circumscriptive semantics which 
only assumes the default negation of propositions, the static semantics assumes 
the default negation of arbitrary propositions. With Proposition 2.4 it follows 
that if T U {not F : T n \= m i n ~^F} implies F, then also -^not F is contained 
in T n+1 = f T (T n ). With this, it is easy to see that W n C T n . So the default 
negation part of the well-founded circumscriptive semantics is weaker than that of 
the static semantics. The reason is that the static semantics assumes negations 
of arbitrary formulae, not only of atoms. E.g. in Theorem 3.1 it is really needed 



30 • S. Brass and J. Dix and T. C. Przymusinski 



that also implications between default negation atoms are assumed. For instance, 



in Example 4.4, the static semantics first derives not q «-> notr and then notp 
follows. However, in the well-founded circumscriptive semantics the limit of the 
sequence W n is the empty set: Nothing becomes known about the default negation 
literals. 

Another difference between the two approaches is that the well-founded circum- 
scriptive semantics permits only minimal models of the objective atoms. The static 
semantics considers minimal models when deciding which default negations to as- 
sume, but if one does not use default negation, one gets standard propositional 
logic. For instance, let P = {p}. If also q belongs the language, the well-founded 
circumscriptive semantics implies -ig and not q, whereas the static semantics implies 
notq, but not ->q. Of course, both imply p and ->notp. 

6.4 Disjunctive Logic Programming Systems 

In addition to the DisLoP project in Koblenz, there is a similar project on dis- 
junctive logic programming at the Theoretical University of Vienna called dlv (see 



| Eitcr et al. 1997 ; Eiter et al. 1998 ] ) . While DisLoP concentrated on a disjunctive 
extension of the wellfoundcd semantics (D-WFS), dlv computes stable models (an- 
swer sets) both for the disjuctive and the non-disjunctive case. It is a knowledge 
representation system, which offers front-ends to several advanced KR formalisms. 
The kernel language, which extends disjunctive logic programming by true negation 
and integrity constraints, allows for representing complex knowledge base problems 



in a highly declarative fashion [Eiter et al. 1998]. The project also incorporates 



modular evaluation techniques along with linguistic extensions to deal with quan- 



titative information [Buccafurri et al. 1997]. 
6.5 Nested Rules 

Recently, Lifschitz et. al. introduced nested expressions in the heads and bodies of 



rules ([Lifschitz et al. 1998]). Also nested negation as failure is supported, which 
is excluded in super logic programs. Their semantics is based on answer sets (also 
called stable models), whereas in our framework, we build upon the wellfoundcd 



semantics. 



In | Greco et al. 1998 ] nested rules are also allowed in rule heads. The authors 
show that, in terms of expressive power, they can capture the full second level of 
the polynomial hierarchy (which is also true for other approaches). 

6.6 Other Logics 

There are also successful approaches to generalize logic programming languages 



by using intuitionistic, linear, or higher order logics (e.g. [Hodas and Miller 1994 



Nadathur and Miller 199C|). These extensions seem somewhat orthogonal to our 



treatment of negation in the context of arbitrary propositional formulas. 
7. CONCLUSION 

We introduced the class of super-programs as a subclass of the class of all non- 
monotonic knowledge bases. We showed that this class of programs properly ex- 
tends the classes of disjunctive logic programs, logic programs with strong (or "clas- 
sical") negation and arbitrary propositional theories. We demonstrated that the 
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semantics of super programs constitutes an intuitively natural extension of the se- 
mantics of normal logic programs. When restricted to normal logic programs, it 
coincides with the well-founded semantics, and, more generally, it naturally corre- 
sponds to the class of all partial stable models of a normal program. 

Subsequently, we established two characterizations of the static semantics of finite 
super-programs, one of which is syntactic and the other model-theoretic, which 
turned out to lead to procedural mechanisms allowing its computation. Due to 
the restricted nature of super programs, these characterizations are significantly 
simpler than those applicable to arbitrary non-monotonic knowledge bases. 

We used one of these characterizations as a basis for the implementation of a 
query- answering interpreter for super-programs which is available on the WWW. 
We noted that while no such computational mechanism can be efficient, due to the 
inherent NP-completeness of the problem of computing answers to just positive dis- 
junctive programs, they can become efficient when restricted to specific subclasses 
of programs and queries. Moreover, further research may produce more efficient 
approximation methods. 

The class of non-monotonic knowledge bases, and, in particular, the class of super 
programs, constitutes a special case of a much more expressive non-monotonic for- 
malism called the Autoepistemic Logic of Knowledge and Beliefs, AELB, introduced 
earlier in Przymusinski 1994; Przymusinski 1998]. AELB isomorphically includes 
the well-known non-monotonic formalisms of Moore's Autoepistemic Logic and Mc- 
Carthy's Circumscription. Via this embedding, the semantics of super programs is 
clearly linked to other well-established non-monotonic formalisms. 

The proposed semantic framework for super programs is sufficiently flexible to 
allow various application-dependent extensions and modifications. We have already 
seen in Theorem 2.16 that by assuming an additional axiom we can produce the 
stable semantics instead of the well-founded semantics. By adding the distribu- 
tive axiom for conjunction we can obtain a semantics that extends the disjunctive 
stationary semantics of logic programs introduced in Przymusinski 1995a]. Many 
other modifications and extensions are possible including variations of the notion 
of a minimal model resulting in inclusive, instead of exclusive, interpretation of 
disjunctions | Przymusinski 1995b] . 
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APPENDIX 

A. KRIPKE MODELS OF STATIC EXPANSIONS 



Before we prove the model-theoretic characterization (Theorem 4.3), we prove here 



a Theorem which easily allows us to construct models of the least static expansion 



from Kripke structures. It is used as a lemma in the proof to Theorem O, but 
it is of its own interest. Although we later need only super programs and reduced 
models, we allow in this section arbitrary belief theories and consider full models. 

In order to be p recise and self-contained, let us briefly repeat the definition of 
Kripke structures | Marek and Truszczyhski 1993f| . Since our axioms entail the 



normality axiom, it suffices to consider normal Kripke structures: 

Definition A.l (Kripke Structure). 
A (normal) Kripke structure is a triple JC = (W, R, V) consisting of 

(1) a non-empty set W , the elements w G W are called worlds, 

(2) a relation R C W x W, the "visibility relation" (if R(w,w') we say that 
world w sees world w' ), and 

(3) a mapping V: W — > OBJ, which assigns to every world w a valuation I i,j — 
V(w) of the objective atoms Ate- 



Definition A. 2 (Truth of Formulas in Worlds). 
The validity of a formula F in a world w given Kripke structure JC — (W, R, V) is 
defined by 

(1) If F is an objective atom (proposition) p G Ate, then (JC,w) \= F :<^=> 
V(w)\=p. 

(2) If F is a negation ->G, then (hC,w) \= F (JC,w) ^ G. 

(3) If F is a disjunction G\ VG2, then 

{JC, w)^F (JC, w) h Gi or {tC, w) \= G 2 

(and further propositional connectives as usual). 

(4) If F is a default negation atom not(G), then 

(JC,w) \= F :<S=*. for all w' G W with R(w,w'): {tC,w') \/= G. 

Now given such a Kripke structure K, we get from every world w a propositional 
interpretation X = JC(w) of C not , i.e. a valuation of Ate U {not (F) : F G C no t}- 
We simply make an objective or belief atom A true in X iff (/C, w) |= A. Since 
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the propositional connectives are defined in a Kripke structure like in standard 
propositional logic, we obviously have X \= F (fC, w) \= F for all F G C not . 

Theorem A. 3 (Kripke Structures Yield Static Expansions). 
Let T be an arbitrary belief theory and fC — (W, R, V) be a Kripke structure satis- 
fying 

(1) For every w G W , there is aw' E W with R(w,w') (consistency). 

(2) For every w G W, (fC,w) \= T, i.e. the interpretation X = JC(w) is a model 
ofT. 

(3) For every w,w' G W with R(w,w'), the interpretation X = fC(w') is a 
minimal model of T ("only minimal models are seen"). 

Then T° := {F G C not : for every w G W : (fC,w) |= F} is a static expansion ofT. 

PROOF. We have to show that T* = Cn not (T U {not F : T° |= min -lF}). The 
fact that TcT follows immediately from the second assumption. First we prove 
that T° is closed under Cn not : 

(1) Consistency Axioms: Let any w G W be given. The first part (K,w) \= 
not (false) is trivial, because for any w' G W we have (JC, w') \£ false. Second, 
we have to show (JC, w) \= ^not (true). By the first requirement of the theorem, 
there is to' G W with R(w,w'). Now (JC, w') \= true, therefore (lC,w) y= 
not (true), i.e. (JC,w) |= ->not(true). 

(2) Distributive Axiom: We have to show that for all formulas F,G G C n ot 
and all w G W that the distributive axiom holds in w: (K,,w) \= not (F V 
G) <-> Not(F) A not(G). This follows simply from applying the definitions: 
(JC,w) \= not(F V G) for all w' G W with R(w,w'): (IC,w') ^ F V G 
<^> for all w' G W with R(w,w'): {K,w') ft F and (fC,w') ^ G 

(JC, w) \= not (F) and (K, w) (= nof (G), (/C, w) |= not (F) A not (G). 

(3) Invariance Inference Rule: Let F <-> G G T°, i.e. for every aielfwe have 
(/C, w) |= F <S=^ (/C, w) h G. But then also (/C, w) \= not (F ^ G) holds for 
every w G W since (K,w') \/= F ^==^- (JC,w') ty= G holds for every w' G W 
with w'). 

(4) Closure under propositional consequences: Let F G C not a formula which 
is a propositional consequence of . . . , F n G T°. Now Fi G T° means that 
(JC, w) \= Fi for every w G W. But the formulas valid in one world are closed 
under propositional consequences, since the meaning of the propositional con- 
nectives is defined as in the standard case. So we get (K., w) \= F, and thus 
F G T°. 

Now suppose that T° ^ m ; n ->F, i.e. F is false in all minimal models of T°. We have 
to show that not (F) G T°, i.e. (fC,w) \= not (F) for every w G W. So we have to 
show (/C, w') y= F for every w' G W with w'). 

Let such a w' be given, and let X = )C(w'). By the last condition of the theorem, 
we know that X is a minimal model of T. By construction, it is also a model of T°, 
and since T C T°, there can be no smaller model. Thus, X is a minimal model 
of T° and therefore satisfies -if, i.e. (JC,w') Y= F. 

Thus we have shown that Cn not (T U{not F : T° |= min -.F}) C T°. The converse 
follows from assumption (3) and (4) of the preceding definition. □ 
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This theorem gives us a simple way to construct models of the least static ex- 
pansion T; Obviously, for every w 6 W, the interpretation 1 = fZ{w) is a model 
of T°. But the least static expansion is a subset of every other static expansion, 
i.e. T C T°, and therefore we have T |= T. 

Corollary A. 4. J/ a Kripke structure /C — (W, R, V) satisfies the conditions 



of Theorem A.S, then for every w £ W , the interpretation X — K,{w) is a model of 



the least static expansion T . 



Example A. 5. Let us consider the knowledge base of Example |2. 13 

not broken — > runs, 
not fixed — > broken. 

Here, we can construct a Kripke model K, with only one world w with the val- 
uation I bj = {^fixed, broken, ->runs}. We let this world "see" itself, i.e. R := 
{(w, w)\ . Then not fixed and not runs are true in (K.,w), but not broken is false. 

It is, however, also possible to add a world w' with a non-minimal valuation I' ob j = 
{fixed, broken, runs}. Both worlds can only see w, i.e. R := {(w, w), (w',w)\, 
because all seen worlds must be minimal models. This example shows that the 
static semantics does not imply — 'fixed, but it of course implies not fixed. So the 
non-monotonic negation is cleanly separated from the classical negation. □ 



Example A. 6. Let us consider the theory P := {p <— not (p)} corresponding to 
a well-known logic program. We claimed in Section |] that the least static expan- 
sion P of this program has infinitely many different models. But let us first look a 
Kripke structure which generates only two models: 



© *® 

~np p 

I.e. the set of worlds W is {1,2}, the visibility relation R is {(1,2), (2,1)} (each 
world can see the other one, but not itself), and p is false in world 1 and true in 
world 2. In world 1, not (p) is false, and in world 2, it is true. 

But there are also quite different Kripke models. The construction in Section [| 
will yield: 
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Note that in world 3, the default atom not (p) is false, so the interpretation of this 
world is non- minimal (there is no need to make p true). Thus, there can be no 
incoming edges. 

Let us now finally present the Kripke structure which yields infinitely many 
models: 



® 



2, 
P 



® 

-TP 





P 



Now we of course have to explain that different worlds really yield different in- 
terpretations. The trick is that world 1 is the only world in which neither not (p) 
nor not (~>p) are true. Now other worlds can be identified with the number of nested 
beliefs necessary to get to world 1. So the formula 

B n_1 (-.raof (p) A ^not (-.p)) A B n - 2 (not (p) V not (-.p)) 

is true in world n > 2, but in no other world. Each world gives rise to one full model 



(as explained in Theorem A. 3 and Corollary A. 4), so the theory {p «— not (p)} really 
has infinitely many full models. 



□ 



B. PROOF OF THE MODEL-THEORETIC CHARACTERIZATION (THEOREM gj) 

We will first prove that a reduced model I = I ob j U I no t with I \= P and I no t G TV 
can be extended to a full model I of the least static expansion P. Of course, this 
proof is based on the Kripke structure already mentioned in Section ^: 

Definition B.l (Standard Kripke Model). 
Let P C £* ot be a super program. We call the Kripke structure fC — (W, R, V) 
defined as follows the "standard Kripke model" of P. Let Af° be the greatest fixpoint 
of&p. Then: 

(1) The set of worlds W are the reduced interpretations I = I t,j U I not we are 
interested in, i. e. satisfying I \= P and I not S TV . 

(2) R(I,I'), i.e. I sees I' iff I' is a minimal model of P and for allpi, . . . ,p„ £ 
At c : 

I |= not (pi A • • • A p n ) I' h ->Pi V • • ■ V -np„. 

(3) The valuation V(I) of a reduced interpretation I = I bj Ul no t is the objective 
part I obj . 

As before, we denote by IC(I) the full interpretation satisfying the default atoms 
true in world /, i.e. 

K,{I) |= not (F) for all I' G W with R{I, I 1 ): (JC, I') \= ->F. 



Super Logic Programs • 39 



Now the reduced interpretation / = I ob j U I no t assigns a truth value to the atoms 
not (pi A - ■ ■ Ap n ) and the Kripke structure also assigns a truth value to them. But 
the construction guarantees that the truth values always agree: 

Lemma B.2. For I — (I ob j U I not ) G W and all p 1 ,. . . ,p„ G Ate-' 

fC(I) \= not (pi A ■ ■ ■ Ap n ) 4=^ I not t= not (p 1 A ■ ■ ■ Ap„). 

Proof. First we show the direction •<= : Let I not |= not (pi A ■ • • Ap n ). By the 
construction, I 1 \= ->pi V • • • V ~^p n holds for all worlds I' seen by /, i.e. satisfying 
R(I, I 1 ). Thus, K{I) \= not (pi A ■ ■ ■ Ap n ). 

Now we prove =>■ by contraposition: Let I not \£ not (pi A ••■ Ap n ). Since 
7V° is a fixpoint of P , we have A/"° = n P (n P (A/' )) . By the definition of lip, 
there is a non-empty O' C Op (A/"*) such that the default atoms true in I not are the 
intersection of the corresponding true negations in O' . Thus, there is I' ob ■ G C with 
I'obj H Pi A ' ' ' A Pn- Furthermore, for all qi, . . . , q m with I not \= not (qi A • • • A q m ), 
we have I' ob ^ \= -iqi V ■ • • V -i<7 m . Now by the definition of Op, there is a I' not E 7V° 
such that / = I' ob j U I' not is a minimal model of P. It follows that R(I,I') holds, 
i.e. / sees a world with valuation I' ob j, in which ->p\ V • ■ ■ V ~^p n is false. Thus 
\£not{p x A---Ap„). □ 



Lemma B.3. For all reduced interpretations I € VF, t/ie /u/Z interpretation T - 
K,(I) is a model of the least static expansion P. 



Proof. We show that the conditions of Theorem A. 3 are satisfied 



(1) We first have to show that every world / = I ob j U I not sees at least one 
world This follows from I not G A/" , i.e. I not G iIp(0p(7V o )). By the 
definition of lip there is a non-empty subset O C Op (TV ) such that every I' ob - G 
O satisfies for all pi, . . . ,p n G Ate- 

Inot |= not (pi A ■ ■ ■ A p n ) => l' obj (= -ipi V • • • V ^Pn- 

Now by the definition of Op, there is a /' lof G M° such that /' = I' ob - U /' lo( is 
a minimal model of P. But then R(I,I') holds. 



(2) The reduced interpretations I EW satisfy the program P. By Lemma B.2, 
/ and X = K,(I) agree on the atoms occurring in P. Thus, also I is a model 
of P. 

(3) For every (/, /') G R, the reduced interpretation I' is a minimal model of P. 
If the full interpretation X' = JC(I') were not a minimal model of P, i.e. there 
were a smaller model I' of P, then its reduct /' would be a smaller model 
than /' (using again Lemma |B.2| in order to conclude that I' and I', and thus 
I' and /' agree on the default atoms). 



Now Theorem A. 3 allows us to conclude that the formulas true in all worlds of W 
are a static expansion of P. Of course, every I = JC(I) is a model of this static 
expansion. But the least static expansion P is a subset, so I is also a model of P. □ 



Lemma B. 4. not {-^F\A- ■ -A^F m AG) h not not (Fi)A- ■ -Anot (F m ) — > not (G). 
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Proof. This is a simple exercise in applying the axioms of £ no t ■ First, we get 

not {Fx V • • • V F m V (~>Fx A • • • A ->F m A G)) not {Fx V • • • V F m V G) 

by the invariance inference rule. Then we apply on both sides the distributive 
axiom: 

not (Fx) A • • • A not (F m ) A not {->Fi A • • • A ->F m A G) 
^ not (Fx) A • • ■ A not (F m ) A not (G). 

This implies propositionally: 

not (Fx) A • • ■ A not (F m ) A not (->Fx A ■ ■ • A ->.F m AG)^ not (G). 
Now we insert our precondition and get the required formula. □ 

Lemma B.5. Let P be finite, X be a full model of the least static expansion P, 
and let I = I ob j U I no t be its reduct. Then I not <E A/"° . 

Proof. We show by induction on k that the default part I no t of a model X of 
the least static expansion P is contained in Q P (MOT). For k = this is trivial, 
since MOT is the complete set of default interpretations. 

Let us assume that I not s Q P (NOT). We have to show that I not is not "filtered 
out" by one further application of 6 P . Let TV := Q P (AfOT), O := Slp(N), and 

O' := {l bj € O : for every default atom not (p\ A • • • Ap n ): 
if Inot h not (px A • • • Ap n ), 
then I oi j \= ->pi V • • • V -■£>„}. 

We will now show that O' has the properties required in the definition of lip, 
namely we will show 

Inot \= not (pi A • • • A p n ) 4=^ for all I' obj e O': l' obj \= ^px V • • • V ^p n . 

This implies that C is non-empty because for n = the empty conjunction is 
logically true. Because of the consistency axiom, I not not (true). But then there 
must be at least one I' ob ^ € C, because otherwise the "for all" on the right hand 
side would be trivially true. Also the direction follows trivially from the 

construction. 

Now we have to show that for every default atom not (px A ■ • ■ Ap n ) which is false 
in 1^, there is I' ob - G £>' with I' ob - ^ -*px V ■ • • V -ip n . Let not (q itl A • • ■ A qt n ,), 
i = 1, . . . ,m, be all default atoms true in I not (containing only the finitely many 
objective propositions occurring in P). Since X j= P, the formula 

m 

(/\ not (q itl A ■ ■ ■ A qi, ni )) ~^ not (px A ■ ■ ■ A p n ) 



cannot be contained in P (it is violated by I no t and thus by X). But Lemma B.4 
shows that the above formula would follow from 



not 



( (A(^.l V • • • V A(px A - ■■ A p n ) J , 



Thus, this formula is also not contained in P. But the static semantics requires 
that not (F) G P if P |= m ; n ~^F. So if not (F) g" P, there must be a minimal 
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model of P violating -\F, i.e. satisfying F. In our case this means that there 
is a minimal model X' of P with X' \= -<qi t i V ■ ■ • V ->qi,m for i — 1, . . . ,m and 
X' (= (pi A • • ■ Ap n ), i.e. J' ^ -ipi V • ■ ■ V -;p n . But by our inductive hypothesis, the 
default part I' not of X' is contained in M, and thus the objective part I' ob ■ is in O. 
Since I' ob ^ |= — ig^i V • • ■ V -iqi, ni , it is contained in C. Thus, 7^ is the required 
element. □ 



Now Theorem |4.3| follows directly from Lemma p.3| and Lemma B.5 



Theorem 4.3 (Model-Theoretic Characterization). 
Let P be a finite super program: 

(1) The operator Op is monotone ( in the lattice of subsets of MOT with the 
order D) and thus its iteration beginning from the set MOT (all interpretations 
of the default atoms, the bottom element of this lattice ) has a fixed point M° . 

(2) M° consists exactly of all I not G MOT that are default parts of a full model 
I of P. 

(3) A reduced interpretation I t,j U I no t is a reduct of a full model X of P iff 

Inot G M° and I bj U I not h P- 

Proof. The monotonicity of Op is obvious: Let Mi 2 M2 (since we are working 
with inverse set inclusion, this means that Mi is below M2 in the lattice). Then we 
get Qp(Mi) 3 Qp(M2)- any I a bj £ Qp(A/«2) is based on a interpretation I not E M2, 
and since A/2 Q Mi, we also have I a bj G Q,p(Mi). Now let 0\ := Q,p{M\) and 
2 := n P {M 2 )- From Oi D 2 it also follows that Q P (Mi) = U P (Oi) D Tl P (0 2 ) = 
0p(A/a), since any O' C C 2 used to construct I not € ilp(0 2 ) is also a subset of 0\. 

Part 2 means that for every I not G MOT: 

There is a full model X of P with belief part I not 7 no t G A/ -0 . 



The direction is Lemma B.5, and the direction <^= follows from Lemma B.3 



and the fact that any default interpretation I not can be extended to a reduced 
model I = I bj U I no t of P (by making all objective atoms Ate true in Iobj)- But 
then 7 G W. 

Part 3 requires that for every reduced interpretation / = 7 y U /not : 

There is a full model X of P with reduct 7 

7„ o4 G A7° and I obj U 7 noi |= P. 



Here the direction <^= is Lemma B.3 and the direction ==> follows trivially from 
Lemma and PCP. □ 



Rem ark B.6. Note that we have used the fmiteness of P only in the proof to 
Lemma B.5. So even in the infinite case, our model-theoretic construction yields 
models of the least static expansion, but it does not necessarily yield all reduced 
models. One example, where a difference might occur, is P = {qi V : i G 
lN}U{r.; Vp : i G IN}. Our model-theoretic construction excludes an interpretation 
which makes all not (qi) true and not (p) false. It seems plausible that P allows 
such models, because it would need an "infinite implication" to exclude them. But 
this question needs further research. 
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□ 



PROOF OF FIXPOINT CHARACTERIZATION (THEOREM 3.1) 



We prove Theorem 3.1 by using the model-theoretic characterization. More specif- 
ically, we show that formulas not (Ei) A ••■ A not(E m ) — > not (Eq) contained 
in P n characterize exactly the default interpretations remaining after n applica- 
tions of Op. 

First we prove the following lemma which characterizes minimal models of special 
knowledge bases. 

Lemma C.l. Let T be any knowledge base and T not be a set of formulae which 
contain only default atoms. Minimal models ofTUT not are precisely those minimal 
models of T which satisfy T not . 

Proof. Let X be a minimal model of TU T not . Of course, X is a model of T and 
of T not . Now suppose that there is a smaller model X' of T. Since I and X' do not 
differ in the interpretation of default atoms, X' is also a model of T not , and thus a 
model of T U T not . But this contradicts the assumed minimality of X. 

Let now X be a minimal model of T which also satisfies T not . Clearly, X is a 
model of T U T not . Since X' is also a model of T, the existence of a smaller model X' 
would contradict the minimality of X. □ 

Next, we need the monotonicity of the sequence P n : 

Lemma C.2. For every n G IN: P n C P n+1 . 

Proof. The prepositional consequence operator Cn is monotonic and has no 
influence on the minimal models, so it suffices to show that the sequence Po := P, 

pn+i ._ p y { not Ex A-- - A not E m -> not E a : 

P n Hmin A • • • A ^E m -f -P } 

increases monotonically. 

The proof is by induction on n. The case n = is trivial. For larger n, the 
inductive hypothesis gives us P n D p™ _1 and all formulas in p n \p n ^ 1 contain only 



default atoms. So Lemma C.l| yields that the minimal models of P n are a subset 
of the minimal models of P™ _1 , and therefore |= min ->Ei A • • • A ~^E m — > Eq 

implies P n hmin -<Ei A • • • A -.^ m -> S , i.e. P n+1 D P" . □ 



Next, we have the small problem that we must in principle look at infinitely many 
default negation atoms, although we have required our program to be finite. For 
instance, not (p), not (pAp), and so on are different default atoms, and in general, 
default interpretations could assign different truth values to them. However, already 
P 1 excludes this: 

Definition C.3 (Regular Model). 
Let a super program P be given. A default interpretation I not is called regular wrt P 
iff 

(1) Lf I not |= not (pi A ■ • • A p n ) and {p u . . . ,p n } C {qi,..., q m }, then I not |= 
not (r/i A • • ■ A q m ). 
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(2) I no t \= not (pi A — Ap„) if some pi E Ate does not occur in P. 
Lemma C.4. All I not E Mi, i > 1 are regular. 

Proof. (1) Every interpretation / satisfies -i(pi A- • ■ Ap n ) — > A- ■ -Ag m ), 
if {pi, . . . ,p n } C {qx, . . . , g TO }. So not (pi A ■ ■ • A p n ) -> not(q\ A-- - A q m ) is 
contained in all P 1 , z > L 

(2) Every minimal model 7 of P satisfies -*(pi A • • • Ap n ) if some pj does not 
occur in P (because / |= ^Pi). But then noi (pi A • • • A p n ) E P 1 , and by 
Lemma |C.2| it is contained also in every P n , n > 1 . 



□ 

Lemma C.5. -Lei P" ot 6e the set of formulas of the form 

not (Ex) A • • • A not (E m ) — > not (E ) 

contained in P n . Furthermore, let Mo := MOT and M n +i '■= Op(M n )- Then for 
every I = I ob] U I„ t with I |= P: I not \= P£ ot -*=^ I no t E jV n - 

Proof. The proof is by induction on n. The case n = is trivial, since Wo = 
MOT and P° = P and we anyway consider only models of P. 

(1) "<;=": Let I not E W n+1 = 0j>(.Af n ). We have to show that I not |= P^ 1 - 
Suppose that this were not the case, i.e. I not violates a formula not E\ A ■ ■ ■ A 
not E m — ■> not Eq contained in P,™^ 1 . This means that 7 not |= not Ei for i = 
1, . . . , m, but J„ ot ^ not P - By the definition of Op, there must be an objective 
model I' ob - E ilp(A/" n ) (contained in the non-empty O') such that I' ob , |= 
for i = 1, . . . , m and \/= —<Eq. By the definition of 17p, there must be a 
default interpretation I' not E A/" n such that I' = I' ob j U I' not is a minimal m odel 



of P. Then the inductive hypothesis gives us I' not \= P™ ot , and Lemma |C.l 
allows us to conclude that I' is a minimal model of P U P™ ot and thus of P n . 
But this means that P n ^ m i n not Ei A ■ ■ ■ A not E m — » not E . Since I' is a 
model of P, the critical formula cannot be contained in P (if P is the empty 
conjunction and P is not affirmative, this would be syntactically possible). And 
finally, it cannot be introduced by the Cn-operator, since I 1 is a model of its 
preconditions. Thus, it is impossible that not E\ A ■ ■ ■ A not E m — > not Eq is 



71 + 1 



contained in P not 



(2) " =^ ": Let J not (= P™^ 1 . By Lemma |CJ we have P n l ot C P, 



Piot |= P^ t , and the inductive hypothesis gives us I not E A/"„. We have to show 
that I no t is not "filtered out" by one further application of the 0p-operator. 
Let 

O' := {l' obj € n P (M n ) : I' obj h for all E with I not \= notE). 

We have to show that for every Eo with I not \/= not Eq there is an I' ob - E O' 
with I' ob - y= -iEq. This especially implies that O' is non-empty, since I no t V= 
not (true), which is obviously contained in P™^ 1 . 

Now suppose that this were not the case, i.e. there were an Eq such that there 
is no I' obj E a with I' ob . y= -nEo. 
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Let not[Ei), i — 1, ...,m, be all belief atoms which are true in I not and 
satisfy the following conditions (in order to make the set finite): First, the 
conjunctions Ei contain only propositions p £ Ate occurring in P (which was 
required to be finite), and second, each Ei contains each proposition at most 
once. 

We now prove that not Ei A ■■• A not E m — > not Eq is contained in P^ , 
which contradicts I no t \= P"^ 1 - Let /' = I' ob - U I' not be any minimal model 
of P" . We have to show that it satisfies A • • • A ~^E m — > ^Eo . The 
induction hypothesis gives us I' not £ Af n , and thus I' ob j £ Qp(Af n )- Suppose that 
I'obj for i = 1, . . . , m, since otherwise the formula is trivially satisfied. 

Since /' is a minimal model and I no t is regular, this means that I' ob j £ O' (the 
validity of -<Ei , . . . , ~<E m implies the validity of all other ->E considered in the 
construction of O'). But we have assumed that no element of O' violates ~^E , 
thus I' obj \= Oo- 



lemma C.6. P r 



C P\C* not 



Proof. We show P™ of C P by induction on n (this implies the above statement 
since P is closed under consequences and P n ° C C* not ). 

For n = this is trivial since P C P. Now suppose that P n |= m i n ^E\ A • • • A 
-^E m — > — ii?o- By Theorem 3.8 in |Brass et al. 199£] and the definition of Cn no t, 
P differs from P only by the addition of formulas containing only default atoms 
plus propositional consequences. By the inductive hypothesis, Pn 0t C P. Now 



Lemma C.l gives us that all minimal models of P are also minimal models of P n , 
and therefore P |= m i n A ■ • • A ~^E m — > -i^o, i.e. P |= mill -^E\ A ■ ■ ■ A ~^E m A E . 
This means that not (^E\ A ■ ■ ■ A ~^E m A Eq) £ P, and by Lemma B.4 we get that 
not Ei A ■ ■ ■ A not E m —* not Eg is contained in P. □ 



Now we can complete the proof of Theorem 3.1. First, a fixpoint is reached 
after a finite number of iterations, because by Lemma C.4 we know that there are 



only a finite number of "really different" default negation atoms, so after the first 
iteration (which ensures the regularity) it suffices to consider a finite number of 
implications not Ei A ■ ■ ■ A not E m — > not Eq, and the sets P n are monotonically 



increasing (Lemma C.2) 



So we have P™° 4 = 



and thus Af no = M no +\ = A/"°. Now for any reduced 
interpretation / = I obj U I not : if I \= P n °, then / |= P and / |= P"° t , and by 



not 



Lemma G.5 we get I no t £ Af°. Now the already proven Theorem 4.3 implies that / is 



a reduct of a full model of the least static expansion P. But this implies / |= P\C* not 
The other direction / |= P\C* not => / |= P n ° follows from Lemma C.6. 
From the equivalence of P n ° 



and P\C* not we get P n « 



P\C* lot , since both sets 



are closed under propositional consequences: For instance, let F £ P n ° and suppose 
that F P\C* not . Since P\C* not is closed under propositional consequences, there 
must be a reduced interpretation / with / |= P\C* not , but I \£ F. This is impossible 
since we already know that every model of P\C* not is also a model of P n °. 



Remark C.7. The finiteness of P was used in the proof for I not (= P" Q 
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Inot 6 Mn- This was to be expected, since we strongly conjecture that for infinite 
programs, the model-theoretic construction does not yield all models of the static 
completion. However, this does not give us any hint whether Theorem 3.1 might 
hold for infinite programs. This question is topic of our future research. 

□ 



D. PROOFS OF PROPERTIES USED IN THE IMPLEMENTATION 

Theorem 5.3. 

Let P be a super logic program, To := 0, and T+i := Hp(T), and n be a natural 
number such that J- n +i = T n . Then the following holds for all Herbrand interpre- 
tations I: I is a minimal model of the ground instantiation P* of P if and only if 
I is a minimal model of T n . 

Proof. First we show that a (minimal) model of one of P* and T n is also a 
model of the other: 

(1) The conditional facts in Hp(Ti) are logical consequences of P* U T. By 
induction on i, it follows that T is implied by P* . Therefore, every model 
of P* is also a model of T n . 

(2) Next, we prove that every minimal model of T n is also a model of P*: 
Suppose that this would not be the case, i.e. I is a minimal model of T n , but 
it violates a rule 

Ai V . . . V A k <- Bi A . . . A B m A not C x A ... A not Q 

in P* . This means that B\, . . . , B m are true in I. Since / is a minimal model 
of T, Ti contains for i = 1, . . . ,m a conditional fact Ai <— Ci that is violated 
in the interpretation / \ {Bi} (i.e. the interpretation that agrees with / except 
that Bi is false in it). It follows that Bi £ Ai, that Ai \ {Bi} is false in /, 
and that Cj is true in / (since the default negation literals are treated like 
new propositions, making Bi false does not change any of the default negation 
literals) . Now consider the conditional fact that is derived from the rule instance 
and the Ai <— C; : 

{A lt r, . . . , A k a} U {Ai \ {B x a}) U . . . U {A m \ {B m a}) *- 

{not Ci<7, . . . , not Cio} U C\ U . . . U C m 

Since T n is a fixpoint of Hp, this fact is also contained in T n . But this is a 
contradiction, since it is violated in /. 

Now let / be a minimal model of P*. (|l|) shows that it is a model of T n . If it 
were not minimal, there would be a smaller model 1\ of T n . Then also a minimal 
model Iq of T n must exist that is still smaller than (or equal to) 1% . But by (||) 
above, Iq is also a model of P* which contradicts the assumed minimality of /. 

Let conversely / be a minimal model of T n . By (||), it is a model of P*. If it 
were not minimal, there would be a smaller model Jo of P* , which is by ([j]) also a 
model of T n , which again contradicts the assumed minimality of I. □ 
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Lemma D.l. Let Ti be a nonmonotonic knowledge base with T\ |= m ; n F. Let T2 
be a set of default negation atoms, i.e. formulas of the form notG with an arbitrary 
formula G. Then Cn not {T x U T 2 ) |= min F. 

Proof. If this were not the case, there were a minimal model / of Cn no t(T\ UT 2 ) 
which does not satisfy ->F. Because of T\ ^= m ; n ~^F and Ti C Cn not (Ti UT2), there 
must be a model In of Ti that is smaller than /, but not a model of Cn not (Ti UT2). 
Since Iq is smaller than /, it assignes the same truth values to the default negation 
literals. But then it satisfies T 2 , i.e. it is a model of Ti U T 2 . Thus, a violated 
formula must be one that is added by Cn not . Take the first such formula. It 
cannot be a propositional consequence, because propositional consequences are by 
definition satisfied in all models that satisfy the preconditions (and until this first 
formula, it satisfied all preconditions). But it can also not be added by (CA), 
(DA), or (IR), because all these formulas consist only of default negation literals, 
which are interpreted the same in both models. Therefore, we can conclude Iq \= 
Cn no t(T\, ■ ■ ■ , T 2 ). But that contradicts the assumed minimality of I. □ 

Theorem 5.6. (1) Let T be a knowledge base with T ^ m ; n -<F. Then T and 
TU {not F} have the same static expansions. 

(2) Let Ti and T 2 be knowledge bases with Cn not (Ti) = Cn not (T 2 ). Then Ti 
and T 2 have the same static expansions. 

Proof. (1) Let T° be a static expansion of T. By the lemma above, T° |= m i n 
->F. But then it easily follows that T° is also a static expansion of TU {not F}: 
It has to satisfy 



Since T° ^ m ; n ->F, the formula not F is anyway contained in the preconditions 

of Cn no t, so the union with {not F} changes nothing. 

Assume conversely that T° is a static expansion of T U {not F}, i.e. 



Again by the lemma above we get T° |= m in ^F. But this means that the 
preconditions are not changed when we do not add {not F} explicitly to the 
preconditions: 



T° = Cn not (T U {not F} U {not G : T° Kin -G}) . 



T°= Cn not (TU {not F}U {notG : T° j= min 



T° = Cn not (TU{notG : T° h=mi„ ~>G}). 



(2) This follows with the following sequence of equations: 



T° = <?n no t(Ti U {notF : T° hmin ^F}) 
= Cn not (Cn n ot(Ti)U{notF : T° hmi: 
= Cn not (Cn not (T 2 )U{notF : T° hmi: 
= Cn not (T 2 U {notF : T* hmin ~-F}). 




□ 



Theorem 5.8. 

Let V be a set of disjunctions of objective atoms, which does not contain the empty 
disjunction false , and which does not contain two disjunctions A and A' , such that 
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Ac A' (i.e. A' is non-minimal) . Let I be a partial interpretation such that atoms 
interpreted as false do not appear in V and atoms interpreted as true appear as 
facts in V. Let p be an atom that appears in the proper disjunction 

P! V • • • V Pi-i VpV p l+ \ V ■■■Vpn 

(and possibly more such disjunctions). Then 

(1) There is a minimal model of T> that extends I and interprets p as false. 

(2) There is a minimal model of T> that extends L and interprets p as true and 
Pi,--- ,Pi-i,Pi+i, ---,Pn as false. 

Proof. (1) Consider the interpretation I' that extends I by interpreting p as 
false and all remaining atoms as true. Suppose that it were not a model of T>, 
i.e. it would violate some disjunction in V. Since all atoms that I interprets as 
false do not appear in £>, and all the remaining atoms except p are interpreted 
as true, the violated disjunction can only be p. But this is a contradiction, 
since then the proper disjunction p\ V • • • V Pi-\ Vp Vp^+i V • • • Vp„ would not 
be minimal. Thus, I' is a model of V. Then there is also a minimal model Lq 
of V that is less than or equal to The atoms interpreted as false in L as well 
as p must be false in J , since it is less or equal to /'. The atoms interpreted 
as true in I appear as facts in £>, so they must be true in 7 - 
(2) Consider the interpretation V that extends I by interpreting p as true, 
pi, . . . ,pi-i,p i+ i, . . . ,p n as false, and all remaining atoms as true. Suppose 
that it were not a model of V, i.e. it would violate some disjunction in V. Since 
all atoms that I interprets as false do not appear in V, and all the remaining 
atoms except pi, ■ ■ ■ ,Pi-i,Pi+i, . . . ,p n are interpreted as true, the atoms in the 
violated disjunction can only be a subset of {pi, . . . ,pi-\,pi + i, . . . ,p n }. But 
this contradicts the assumed minimality of the disjunction p\ V • • • V pi-\ VpV 
p i+1 V • • • Vp„. Thus, I' is a model of V. Then there is also a minimal model Iq 
of V that is less than or equal to This means that the atoms interpreted 
as false in / as well as pi, . . . . . . ,p n must be false in I . All atoms 

interpreted as true in / must be true in 7 , since they appear as facts in T>. Fi- 
nally, also p must be true in L 0} since otherwise it would violate the disjunction 
pi V • • • V p^i VpV p i+ i V • • • V p n . 



□ 



